Back
CVE-2026-9695
Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026
Critical9.8EPSS 0.61%
- Published
- Updated
- Reserved
- Assigned by
- 3DS
Description
An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.
Timeline
ID reserved
By 3DS
- 42 days later
· 42 days later
Published
- 34 days later
· 34 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| 3DSCNA (assigner) | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Awaiting Analysis | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.61% · top 51% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: total
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.
Weakness
Affected products
Dassault Systèmes · DELMIA Apriso
- affected Release 2020 Golden – ≤ Release 2020 SP4
- affected Release 2021 Golden – ≤ Release 2021 SP3
- affected Release 2022 Golden – ≤ Release 2022 SP4
- affected Release 2023 Golden – ≤ Release 2023 SP3
- affected Release 2024 Golden – ≤ Release 2024 SP2
- affected Release 2025 Golden – ≤ Release 2025 SP1
- affected Release 2026 Golden – ≤ Release 2026 SP1
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2026-9695)Record last updated .