CVE-2026-7858
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
A Deserialization of Untrusted Data vulnerability in Teamwork Cloud and Magic Collaboration Studio from No Magic Release 2022x through 2026x and CATIA Magic Release 2022x through 2026x could lead to unauthenticated remote code execution.
Risk Assessment
An unauthenticated attacker can remotely execute code on the server, potentially leading to full system compromise.
Recommendation
Apply patches provided by the vendor or update the software to a version that fixes this vulnerability.
Original NVD description (English source)
A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.