Back to CVE records
Critical 10.0Published Aug 11, 2026
CVE-2026-17061Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026
Updated under an hour ago ()
Does this affect you?
It affects Dassault Systèmes SIMULIA Execution Engine. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution.
- CVSS
- 10.0 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Weakness (CWE)
- CWE-502
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- 3DS
- NVD analysis
- Awaiting Analysis
- Record last updated
- Aug 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Dassault Systèmes SIMULIA Execution Engine dassault_systemes:simulia_execution_engine (from the name) | Release 2023 Golden; from Release 2024 Golden through Release 2024 FP.CFA.2615; from Release 2025 Golden through Release 2025 FP.CFA.2628; from Release 2026 Golden through Release 2026 FP.CFA.2624 | CNA record |
References
- https://www.3ds.com/trust-center/security/security-advisories/cve-2026-17061
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.