Description
An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.
Published: 2026-08-27
Score: 9.3 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 28 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Dassault Systèmes
Dassault Systèmes 3dswymer
Vendors & Products Dassault Systèmes
Dassault Systèmes 3dswymer

Thu, 27 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
Description An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.
Title Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x
Weaknesses CWE-285
References
Metrics cvssV3_1

{'score': 9.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N'}


Subscriptions

Dassault Systèmes 3dswymer
cve-icon MITRE

Status: PUBLISHED

Assigner: 3DS

Published:

Updated: 2026-08-27T19:38:21.921Z

Reserved: 2026-07-20T10:11:24.249Z

Link: CVE-2026-16279

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-08-27T17:17:14.460

Modified: 2026-08-28T15:42:20.060

Link: CVE-2026-16279

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T16:14:44Z

Weaknesses