Strix
26.1K

CVE-2026-7858

CRITICALCVSS 9.8/10EPSS 0.54%

Last modified

CVE-2026-7858 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.. EPSS estimates a 0.54% chance of exploitation in the next 30 days.

Description

A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.

Metrics

CVSS 3.1
9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.54%

42.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
Dassault SystèmesTeamwork Cloud - Standard Edition>= No Magic Release 2022x Golden, <= No Magic Release 2022x Refresh2 HF3; >= No Magic Release 2024x Golden, <= No Magic Release 2024x Refresh3 HF1; >= No Magic Release 2026x Golden, <= No Magic Release 2026x Golden HF2
Dassault SystèmesTeamwork Cloud - Business Edition>= No Magic Release 2022x Golden, <= No Magic Release 2022x Refresh2 HF3; >= No Magic Release 2024x Golden, <= No Magic Release 2024x Refresh3 HF1; >= No Magic Release 2026x Golden, <= No Magic Release 2026x Golden HF2
Dassault SystèmesTeamwork Cloud - Business Pro Edition>= No Magic Release 2022x Golden, <= No Magic Release 2022x Refresh2 HF3; >= No Magic Release 2024x Golden, <= No Magic Release 2024x Refresh3 HF1; >= No Magic Release 2026x Golden, <= No Magic Release 2026x Golden HF2
Dassault SystèmesTeamwork Cloud - Enterprise Edition>= No Magic Release 2022x Golden, <= No Magic Release 2022x Refresh2 HF3; >= No Magic Release 2024x Golden, <= No Magic Release 2024x Refresh3 HF1; >= No Magic Release 2026x Golden, <= No Magic Release 2026x Golden HF2
Dassault SystèmesMagic Collaboration Studio>= CATIA Magic Release 2022x Golden, <= CATIA Magic Release 2022x Refresh2 HF3; >= CATIA Magic Release 2024x Golden, <= CATIA Magic Release 2024x Refresh3 HF1; >= CATIA Magic Release 2026x Golden, <= CATIA Magic Release 2026x Golden HF2

References

Timeline

Published
Last Modified
Status
Awaiting Analysis

Frequently Asked Questions

What is CVE-2026-7858?
A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.
How severe is CVE-2026-7858?
CVE-2026-7858 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 0.54% probability of exploitation in the next 30 days.
How do I fix CVE-2026-7858?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-7858?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST