Critical severity · published Jul 8, 2026
CVE-2026-9695
Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026
9.8
CVSS
0.6%
EPSS
No
On KEV
Description
An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
DELMIA Apriso · Dassault Systèmes
Release 2020 Golden through Release 2020 SP4; Release 2021 Golden through Release 2021 SP3; Release 2022 Golden through Release 2022 SP4; Release 2023 Golden through Release 2023 SP3; Release 2024 Golden through Release 2024 SP2; Release 2025 Golden through Release 2025 SP1; +1 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-9695
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-9695
www.3ds.com
https://www.3ds.com/trust-center/security/security-advisories/cve-2026-9695
More from DELMIA Apriso
9.1
CVE-2025-6205
Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
9.0
CVE-2025-5086
Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
8.0
CVE-2025-6204
Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025