Vulnerability · Published Jun 1, 2026 · Assigned by 3DS
CVE-2026-7858Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x
Critical 9.8
In plain English
A critical-severity unsafe deserialization in Magic Collaboration Studio from Dassault Systèmes. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.5%top 54.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dassault Systèmes | Teamwork Cloud - Standard Edition | No Magic Release 2022x Golden – through No Magic Release 2022x Refresh2 HF3No Magic Release 2024x Golden – through No Magic Release 2024x Refresh3 HF1No Magic Release 2026x Golden – through No Magic Release 2026x Golden HF2 |
| Dassault Systèmes | Teamwork Cloud - Business Edition | No Magic Release 2022x Golden – through No Magic Release 2022x Refresh2 HF3No Magic Release 2024x Golden – through No Magic Release 2024x Refresh3 HF1No Magic Release 2026x Golden – through No Magic Release 2026x Golden HF2 |
| Dassault Systèmes | Teamwork Cloud - Business Pro Edition | No Magic Release 2022x Golden – through No Magic Release 2022x Refresh2 HF3No Magic Release 2024x Golden – through No Magic Release 2024x Refresh3 HF1No Magic Release 2026x Golden – through No Magic Release 2026x Golden HF2 |
| Dassault Systèmes | Teamwork Cloud - Enterprise Edition | No Magic Release 2022x Golden – through No Magic Release 2022x Refresh2 HF3No Magic Release 2024x Golden – through No Magic Release 2024x Refresh3 HF1No Magic Release 2026x Golden – through No Magic Release 2026x Golden HF2 |
| Dassault Systèmes | Magic Collaboration Studio | CATIA Magic Release 2022x Golden – through CATIA Magic Release 2022x Refresh2 HF3CATIA Magic Release 2024x Golden – through CATIA Magic Release 2024x Refresh3 HF1CATIA Magic Release 2026x Golden – through CATIA Magic Release 2026x Golden HF2 |
Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H