CVE-2026-7858criticalCWE-502

CVE-2026-7858: falha crítica em Dassault Systèmes Magic Collaboration Studio

Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x

Publicada em

Seguir esta CVE+ Monitorar Teamwork Cloud -+ Monitorar Teamwork Cloud - Business

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.5%
A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Dassault Systèmes · Magic Collaboration StudioDassault Systèmes · Teamwork Cloud - Business EditionDassault Systèmes · Teamwork Cloud - Business Pro EditionDassault Systèmes · Teamwork Cloud - Enterprise EditionDassault Systèmes · Teamwork Cloud - Standard Edition
CVEs relacionadas — Dassault Systèmes Magic Collaboration Studio

No mesmo produto, das mais perigosas para as menos.

CVE-2023-3588MEDIUMStored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022xEPSS 0.3%CVE-2023-3589MEDIUMCross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022xEPSS 0.2%