CVE-2026-7858criticalCWE-502

CVE-2026-7858: fallo crítico en Dassault Systèmes Magic Collaboration Studio

Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x

Publicada el

Seguir esta CVE+ Monitorear Teamwork Cloud -+ Monitorear Teamwork Cloud - Business

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.8epss 0.5%
A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Dassault Systèmes · Magic Collaboration StudioDassault Systèmes · Teamwork Cloud - Business EditionDassault Systèmes · Teamwork Cloud - Business Pro EditionDassault Systèmes · Teamwork Cloud - Enterprise EditionDassault Systèmes · Teamwork Cloud - Standard Edition
CVEs relacionadas — Dassault Systèmes Magic Collaboration Studio

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-3588MEDIUMStored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022xEPSS 0.3%CVE-2023-3589MEDIUMCross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022xEPSS 0.2%