CVE-2026-11756CWE-502

Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x

Critical · published July 28, 2026

CVSS v3.1
10.0
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution.

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00812 · 56.5th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-07-28T07:35Z
EPSS history
Timeline
  • 28 JUL 07:35Z
    Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x
    cvelistv5