CVE-2026-9695
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
An Improper Authentication vulnerability in DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.
Risk Assessment
An attacker could take control of the server, compromising the confidentiality, integrity, and availability of production data and systems.
Recommendation
Immediately update DELMIA Apriso to the latest available version outside the affected range and implement additional multi-factor authentication mechanisms.
Other vulnerabilities in DELMIA Apriso
See all- CVE-2025-6205CriticalActively exploited
A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.
- CVE-2025-6204HighActively exploited
An improper control of code generation (code injection) vulnerability in DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.
- CVE-2025-5086CriticalActively exploited
A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.
Original NVD description (English source)
An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS