High 8.1Published Jul 1, 2026

CVE-2026-5120Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026

Updated under an hour ago (Oct 27, 2026, 1:50 PM ET)

Does this affect you?

It affects Dassault Systèmes BIOVIA Workbook. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Dassault Systèmes BIOVIA Workbook

Exploited in the last 30 days

A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 could allow a user to access unauthorized data from another user.

CVSS: 8.1 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness (CWE): CWE-362
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: 3DS
NVD analysis: Deferred
Record last updated: Jul 1, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Dassault Systèmes BIOVIA Workbook dassault_systemes:biovia_workbook (from the name)	from Release 2021 Golden through Release 2021 Refresh5; from Release 2022 Golden through Release 2022 Refresh5; from Release 2023 Golden through Release 2023 Refresh4; from Release 2024 Golden through Release 2024 Refresh4; from Release 2025 Golden through Release 2025 Refresh3; Release 2026 Golden	CNA record

References

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-5120

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.