CVE-2026-9695

CRITICAL

Dassault DELMIA Apriso 2020-2026 - Improper Authentication Privilege Escalation

Title source: manual

Description

An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.

References (1)

Core 1

Core References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-9695

Scores

CVSS v3 9.8

EPSS 0.0034

EPSS Percentile 27.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-287

Status published

Products (7)

Dassault Systèmes/DELMIA Apriso Release 2020 Golden - Release 2020 SP4

Dassault Systèmes/DELMIA Apriso Release 2021 Golden - Release 2021 SP3

Dassault Systèmes/DELMIA Apriso Release 2022 Golden - Release 2022 SP4

Dassault Systèmes/DELMIA Apriso Release 2023 Golden - Release 2023 SP3

Dassault Systèmes/DELMIA Apriso Release 2024 Golden - Release 2024 SP2

Dassault Systèmes/DELMIA Apriso Release 2025 Golden - Release 2025 SP1

Dassault Systèmes/DELMIA Apriso Release 2026 Golden - Release 2026 SP1

Published Jul 08, 2026

Tracked Since Jul 08, 2026