CVE-2026-11756

CRITICAL

Dassault 3DEXPERIENCE Station Launcher R2023x-R2026x - Remote Code Execution

Title source: manual

Description

A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution.

References (1)

Core 1

Core References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-11756

Scores

CVSS v3 10.0

EPSS 0.0045

EPSS Percentile 37.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-502

Status published

Products (4)

Dassault Systèmes/Station Launcher App in 3DEXPERIENCE platform Release 3DEXPERIENCE R2023x Golden - Release 3DEXPERIENCE R2023x.FP.CFA.2613

Dassault Systèmes/Station Launcher App in 3DEXPERIENCE platform Release 3DEXPERIENCE R2024x Golden - Release 3DEXPERIENCE R2024x.FP.CFA.2615

Dassault Systèmes/Station Launcher App in 3DEXPERIENCE platform Release 3DEXPERIENCE R2025x Golden - Release 3DEXPERIENCE R2025x.FP.CFA.2628

Dassault Systèmes/Station Launcher App in 3DEXPERIENCE platform Release 3DEXPERIENCE R2026x Golden - Release 3DEXPERIENCE R2026x.FP.CFA.2624

Published Jul 28, 2026

Tracked Since Jul 28, 2026