← Back to browse · API

CVE-2026-11756

Severity
CRITICAL
CVSS
10.0
EPSS
0.00452
Risk score
40.16
CISA KEV
No
PoC
No
Published
2026-07-28
Modified
2026-07-28
First seen
2026-08-05
Aliases
EUVD-2026-49715, GHSA-R8WF-HWM5-PF4X
Products
Dassault Systèmes:Station Launcher App in 3DEXPERIENCE platform Release 3DEXPERIENCE R2023x Golden ≤Release 3DEXPERIENCE R2023x.FP.CFA.2613, Dassault Systèmes:Station Launcher App in 3DEXPERIENCE platform Release 3DEXPERIENCE R2024x Golden ≤Release 3DEXPERIENCE R2024x.FP.CFA.2615, Dassault Systèmes:Station Launcher App in 3DEXPERIENCE platform Release 3DEXPERIENCE R2025x Golden ≤Release 3DEXPERIENCE R2025x.FP.CFA.2628, Dassault Systèmes:Station Launcher App in 3DEXPERIENCE platform Release 3DEXPERIENCE R2026x Golden ≤Release 3DEXPERIENCE R2026x.FP.CFA.2624
Sources
nvd CVE-2026-11756
euvd EUVD-2026-49715

Description

A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution.

References