CVE-2026-11756

CriticalCVSS 10.0

Published: 28/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 28/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

37th percentile - higher than 37% of all known CVEs

Summary

A deserialization of untrusted data vulnerability in the Station Launcher App in 3DEXPERIENCE platform from Release R2023x through R2026x could lead to unauthenticated remote code execution.

Risk Assessment

An attacker can remotely execute arbitrary code on the server without authentication, potentially leading to full compromise of the 3DEXPERIENCE platform.

Recommendation

Update the 3DEXPERIENCE platform to a patched version or apply available fixes.

Original NVD description (English source)

A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution.