CVE-2026-17061

Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026

State: Published
Severity: 10.0 Critical
Published: Aug 11, 2026
Updated: Aug 11, 2026
Reserved: Jul 24, 2026

Description

A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution.

Scores

CVSS	Score	Vector	Source
3.1	10.0 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	3DS

Weaknesses

CWE-502 Deserialization of Untrusted Data

Affected Products

Product	Versions
SIMULIA Execution EngineDassault Systèmes	Release 2023 GoldenAffected Release 2024 Golden through Release 2024 FP.CFA.2615Affected Release 2025 Golden through Release 2025 FP.CFA.2628Affected Release 2026 Golden through Release 2026 FP.CFA.2624Affected

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-17061

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.