CVE-2026-7858

Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x

State
Published
Severity
9.8 Critical
Published
Jun 1, 2026
Updated
Jun 1, 2026
Reserved
May 5, 2026

Read the record on cve.org

Description

A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H3DS

Weaknesses

  • CWE-502 Deserialization of Untrusted Data

Affected Products

ProductVersions
Teamwork Cloud - Standard EditionDassault Systèmes
  • No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3Affected
  • No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1Affected
  • No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2Affected
Teamwork Cloud - Business EditionDassault Systèmes
  • No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3Affected
  • No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1Affected
  • No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2Affected
Teamwork Cloud - Business Pro EditionDassault Systèmes
  • No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3Affected
  • No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1Affected
  • No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2Affected
Teamwork Cloud - Enterprise EditionDassault Systèmes
  • No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3Affected
  • No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1Affected
  • No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2Affected
Magic Collaboration StudioDassault Systèmes
  • CATIA Magic Release 2022x Golden through CATIA Magic Release 2022x Refresh2 HF3Affected
  • CATIA Magic Release 2024x Golden through CATIA Magic Release 2024x Refresh3 HF1Affected
  • CATIA Magic Release 2026x Golden through CATIA Magic Release 2026x Golden HF2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.