CVE-2026-11756: Station Launcher App in 3DEXPERIENCE platform Release 3DEXPERIENCE R2023x Golden through Release 3DEXPERIENCE…

CVE-2026-11756. CVSS 3.1 base score 10.0 (CRITICAL, Vendor/CNA). EPSS 0.00812 (percentile 0.56542), scored 22-Oct-2026.

Affected technology

Station Launcher App in 3DEXPERIENCE platform · Release 3DEXPERIENCE R2023x Golden through Release 3DEXPERIENCE R2023x.FP.CFA.2613, Release 3DEXPERIENCE R2024x Golden through Release 3DEXPERIENCE R2024x.FP.CFA.2615, Release 3DEXPERIENCE R2025x Golden through Release 3DEXPERIENCE R2025x.FP.CFA.2628, Release 3DEXPERIENCE R2026x Golden through Release 3DEXPERIENCE R2026x.FP.CFA.2624
Dassault Systèmes

Description’s affected range: through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could run code remotely. Vendor/CNA’s CVSS 3.1 assessment (base score 10.0/10) rates confidentiality, integrity and availability impact as high.

Published 24-Oct-2026 15:08 UTC

CWE: CWE-502
CCR priority: 40.2 /100 (P3)
CVSS 3.1: 10.0 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · Vendor/CNA
EPSS: 0.00812 · percentile 0.56606 · 2026-10-24
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-24 15:09:16.138216+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-24 15:07:27.951960+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-11756.html