CVE-2026-16279
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.
Risk Assessment
An attacker may gain unauthorized access to user accounts, potentially leading to data confidentiality breaches.
Recommendation
Apply vendor-provided patches for 3DSwymer regarding 3DPassport.
Other vulnerabilities in 3DSwymer
See all- CVE-2025-10558High
Stored XSS vulnerability in 3DSearch in 3DSwymer on 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script in user's browser session.
- CVE-2025-10552High
Stored XSS vulnerability in 3DSwym in 3DSwymer on 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script in user's browser session.
Original NVD description (English source)
An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS