CVE-2026-17061

Full vulnerability record from the local CVENow database.

Description

A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution.

Severity

CRITICAL

CVSS score

10.0 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

[email protected]

Published

2026-08-11 15:17:27.783000

Last modified

2026-10-23 19:10:00.167000

View original CVE JSON

{
  "id": "CVE-2026-17061",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-11T15:17:27.783",
  "lastModified": "2026-10-23T19:10:00.167",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de Deserialización de Datos No Confiables que afecta a SIMULIA Execution Engine desde la Versión 2023 hasta la Versión 2026 podría conducir a una ejecución remota de código no autenticada."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Dassault Systèmes",
          "product": "SIMULIA Execution Engine",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "Release 2023 Golden",
              "status": "affected"
            },
            {
              "version": "Release 2024 Golden",
              "lessThanOrEqual": "Release 2024 FP.CFA.2615",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "Release 2025 Golden",
              "lessThanOrEqual": "Release 2025 FP.CFA.2628",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "Release 2026 Golden",
              "lessThanOrEqual": "Release 2026 FP.CFA.2624",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "baseScore": 10.0,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-11T19:28:46.275357Z",
          "id": "CVE-2026-17061",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-17061",
      "source": "[email protected]"
    }
  ]
}