Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2026-7858

Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x

Critical9.8EPSS 0.54%
Published
Updated
Reserved
Assigned by
3DS

Description

A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.

Scores

CVSS scores of CVE-2026-7858, by who scored it
Scored byCVSSScoreVector
3DSCNA (assigner)3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Awaiting Analysis3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.54% · top 54% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: yes · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Weakness

Affected products

  • Dassault Systèmes · Teamwork Cloud - Standard Edition

    • affected No Magic Release 2022x Golden – ≤ No Magic Release 2022x Refresh2 HF3
    • affected No Magic Release 2024x Golden – ≤ No Magic Release 2024x Refresh3 HF1
    • affected No Magic Release 2026x Golden – ≤ No Magic Release 2026x Golden HF2

  • Dassault Systèmes · Teamwork Cloud - Business Edition

    • affected No Magic Release 2022x Golden – ≤ No Magic Release 2022x Refresh2 HF3
    • affected No Magic Release 2024x Golden – ≤ No Magic Release 2024x Refresh3 HF1
    • affected No Magic Release 2026x Golden – ≤ No Magic Release 2026x Golden HF2

  • Dassault Systèmes · Teamwork Cloud - Business Pro Edition

    • affected No Magic Release 2022x Golden – ≤ No Magic Release 2022x Refresh2 HF3
    • affected No Magic Release 2024x Golden – ≤ No Magic Release 2024x Refresh3 HF1
    • affected No Magic Release 2026x Golden – ≤ No Magic Release 2026x Golden HF2

  • Dassault Systèmes · Teamwork Cloud - Enterprise Edition

    • affected No Magic Release 2022x Golden – ≤ No Magic Release 2022x Refresh2 HF3
    • affected No Magic Release 2024x Golden – ≤ No Magic Release 2024x Refresh3 HF1
    • affected No Magic Release 2026x Golden – ≤ No Magic Release 2026x Golden HF2

  • Dassault Systèmes · Magic Collaboration Studio

    • affected CATIA Magic Release 2022x Golden – ≤ CATIA Magic Release 2022x Refresh2 HF3
    • affected CATIA Magic Release 2024x Golden – ≤ CATIA Magic Release 2024x Refresh3 HF1
    • affected CATIA Magic Release 2026x Golden – ≤ CATIA Magic Release 2026x Golden HF2

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2026-7858 badge
[![CVE-2026-7858](https://trackcve.app/badge/CVE-2026-7858.svg)](https://trackcve.app/cve/CVE-2026-7858)

Record last updated .