CVE-2025-9976criticalCWE-78

CVE-2025-9976: critical vulnerability in Dassault Systèmes Station Launcher App in…

OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

Published · Updated

Follow this CVE+ Monitor Station Launcher App in 3DEXPERIENCE platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9epss 0.9%
An OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x could allow an attacker to execute arbitrary code on the user's machine.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Affected products
Dassault Systèmes · Station Launcher App in 3DEXPERIENCE platform
Related CVEs — Dassault Systèmes Station Launcher App in…

In the same product, most dangerous first.

CVE-2026-11756CRITICALDeserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026xEPSS 0.8%