Login Request a demo
Critical severity · published Jun 1, 2026
CVE-2026-7858
Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x
9.8
CVSS
0.5%
EPSS
No
On KEV
Description
A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Magic Collaboration Studio · Dassault Systèmes
CATIA Magic Release 2022x Golden through CATIA Magic Release 2022x Refresh2 HF3; CATIA Magic Release 2024x Golden through CATIA Magic Release 2024x Refresh3 HF1; CATIA Magic Release 2026x Golden through CATIA Magic Release 2026x Golden HF2 · source: vendor
TC
Teamwork Cloud - Business Edition · Dassault Systèmes
No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3; No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1; No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2 · source: vendor
TC
Teamwork Cloud - Business Pro Edition · Dassault Systèmes
No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3; No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1; No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2 · source: vendor
TC
Teamwork Cloud - Enterprise Edition · Dassault Systèmes
No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3; No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1; No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2 · source: vendor
TC
Teamwork Cloud - Standard Edition · Dassault Systèmes
No Magic Release 2022x Golden through No Magic Release 2022x Refresh2 HF3; No Magic Release 2024x Golden through No Magic Release 2024x Refresh3 HF1; No Magic Release 2026x Golden through No Magic Release 2026x Golden HF2 · source: vendor
Affected product
MC
Magic Collaboration Studio
Dassault Systèmes
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-7858
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-7858
www.3ds.com
https://www.3ds.com/trust-center/security/security-advisories/cve-2026-7858