Critical 9.8Published Jun 1, 2026

CVE-2026-7858Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x

Updated under an hour ago (Oct 27, 2026, 4:30 AM ET)

Does this affect you?

It affects Dassault Systèmes Teamwork Cloud - Standard Edition and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Dassault Systèmes Teamwork Cloud - Standard Edition

Exploited in the last 30 days

A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-502
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: 3DS
NVD analysis: Awaiting Analysis
Record last updated: Jun 1, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Dassault Systèmes Teamwork Cloud - Standard Edition dassault_systemes:teamwork_cloud_standard_edition (from the name)	from No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3; from No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1; from No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2	CNA record
Dassault Systèmes Teamwork Cloud - Business Edition dassault_systemes:teamwork_cloud_business_edition (from the name)	from No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3; from No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1; from No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2	CNA record
Dassault Systèmes Teamwork Cloud - Business Pro Edition dassault_systemes:teamwork_cloud_business_pro_edition (from the name)	from No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3; from No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1; from No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2	CNA record
Dassault Systèmes Teamwork Cloud - Enterprise Edition dassault_systemes:teamwork_cloud_enterprise_edition (from the name)	from No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3; from No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1; from No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2	CNA record
Dassault Systèmes Magic Collaboration Studio dassault_systemes:magic_collaboration_studio (from the name)	from CATIA Magic Release 2022x Golden through CATIA Magic Release 2022x Refresh2 HF3; from CATIA Magic Release 2024x Golden through CATIA Magic Release 2024x Refresh3 HF1; from CATIA Magic Release 2026x Golden through CATIA Magic Release 2026x Golden HF2	CNA record

References

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-7858

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.