What’s Vulnerable › Vulnerabilities

CVE-2026-9695: Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-08 · updated 2026-10-25
• Weakness: CWE-287

Description

An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.

Affected products

• Dassault Systèmes DELMIA Apriso: from Release 2020 Golden through Release 2020 SP4; from Release 2021 Golden through Release 2021 SP3; from Release 2022 Golden through Release 2022 SP4; from Release 2023 Golden through Release 2023 SP3; from Release 2024 Golden through Release 2024 SP2; from Release 2025 Golden through Release 2025 SP1

References

• https://www.3ds.com/trust-center/security/security-advisories/cve-2026-9695

Get alerted when CVE-2026-9695 or the next vulnerability affects your stack