CVE-2026-9695

Published Jul 8, 2026

Last updated 3 months ago

CVSS critical 9.8
web application
OT

Overview

Description
An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.
Source
3DS.Information-Security@3ds.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
9.8
Impact score
5.9
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

3DS.Information-Security@3ds.com
CWE-287

Social media

Hype score
Not currently trending

Related CVEs

  1. Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability•CVE-2026-21589
  2. CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform.•CVE-2024-10085
  3. PaperCut NG/MF Unsafe Reflection Vulnerability•CVE-2026-82078
  4. PaperCut NG/MF Missing Authentication for Critical Function Vulnerability•CVE-2026-81578
  5. A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user accounts by directly setting new credentials.•CVE-2026-18963

References

Sources include official advisories and independent security research.