Deserialization of Untrusted Data Vulnerability in Teamwork Cloud and Magic Collaboration Studio
CVE-2026-7858

9.8CRITICAL

Key Information:

Vendor

Dassault Systèmes

Status
Teamwork Cloud - Standard Edition
Teamwork Cloud - Business Edition
Teamwork Cloud - Business Pro Edition
Teamwork Cloud - Enterprise Edition
Vendor
CVE Published:
1 June 2026

What is CVE-2026-7858?

A vulnerability exists in Teamwork Cloud and Magic Collaboration Studio that allows for the deserialization of untrusted data, potentially enabling unauthenticated remote code execution. This may allow attackers to exploit the affected applications without any authentication, posing significant risks to users and their data integrity. It is crucial for organizations using these products to apply the necessary patches and mitigations to safeguard their systems.

Affected Version(s)

Magic Collaboration Studio CATIA Magic Release 2022x Golden

Magic Collaboration Studio CATIA Magic Release 2024x Golden

Magic Collaboration Studio CATIA Magic Release 2026x Golden

References

https://www.3ds.com/trust-center/security/security-adviso...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tyler Harkness
.