Critical 9.8Published Jul 8, 2026

CVE-2026-9695Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026

Updated under an hour ago (Oct 26, 2026, 11:50 PM ET)

Does this affect you?

It affects Dassault Systèmes DELMIA Apriso. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Dassault Systèmes DELMIA Apriso

Exploited in the last 30 days

An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-287
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: 3DS
NVD analysis: Awaiting Analysis
Record last updated: Aug 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Dassault Systèmes DELMIA Apriso dassault_systemes:delmia_apriso (from the name)	from Release 2020 Golden through Release 2020 SP4; from Release 2021 Golden through Release 2021 SP3; from Release 2022 Golden through Release 2022 SP4; from Release 2023 Golden through Release 2023 SP3; from Release 2024 Golden through Release 2024 SP2; from Release 2025 Golden through Release 2025 SP1; from Release 2026 Golden through Release 2026 SP1	CNA record

References

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-9695

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.