CVE-2026-7858: Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-01 · updated 2026-07-22
Weakness: CWE-502

Description

A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.

Affected products

Dassault Systèmes Magic Collaboration Studio: from CATIA Magic Release 2022x Golden through CATIA Magic Release 2022x Refresh2 HF3; from CATIA Magic Release 2024x Golden through CATIA Magic Release 2024x Refresh3 HF1; from CATIA Magic Release 2026x Golden through CATIA Magic Release 2026x Golden HF2
Dassault Systèmes Teamwork Cloud - Business Edition: from No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3; from No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1; from No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2
Dassault Systèmes Teamwork Cloud - Business Pro Edition: from No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3; from No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1; from No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2
Dassault Systèmes Teamwork Cloud - Enterprise Edition: from No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3; from No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1; from No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2
Dassault Systèmes Teamwork Cloud - Standard Edition: from No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3; from No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1; from No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-7858

Get alerted when CVE-2026-7858 or the next vulnerability affects your stack