CVE-2026-7858

Published Jun 1, 2026

Last updated 3 months ago

CVSS critical 9.8
Cloud

Overview

Description
A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.
Source
3DS.Information-Security@3ds.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
9.8
Impact score
5.9
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

3DS.Information-Security@3ds.com
CWE-502

Social media

Hype score
Not currently trending

  1. CVE-2026-7858 - Critical unauthenticated RCE in Dassault Systèmes Teamwork Cloud & Magic Collaboration Studio. Deserialization flaw in versions 2022x-2026x. CVSS 9.8. No patch available. Isolate affected systems. #CVE #infosec #Dassault #CVEAlert More https://t.co/yTMuQbh35x

    @HugoValters

    7 Jun 2026

    35 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.•CVE-2026-110447
  2. Ahsay AhsayCBS Improper Authentication Vulnerability•CVE-2026-105133
  3. Ahsay AhsayCBS Command Injection Vulnerability•CVE-2026-105134
  4. Citrix NetScaler Improper Input Validation Vulnerability•CVE-2026-88771
  5. Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability•CVE-2026-88772

References

Sources include official advisories and independent security research.