EUVD-2026-67137
GHSA-4w8p-xx38-h33q
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Remote unauthenticated attacker but requires victim interaction (UI:R); scope-changed because compromising the 3DPassport SSO component affects downstream accounts, with high C/I and no availability impact.
Primary rating from Vendor (3DS).
CVSS VectorVendor: 3DS
Lifecycle Timeline
2DescriptionCVE.org
An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.
AnalysisAI
Account takeover affects the 3DPassport identity component bundled with Dassault Systèmes 3DSwymer across 3DEXPERIENCE releases R2023x through R2026x, where an improper authorization flaw (CWE-285) lets a remote, unauthenticated attacker who lures a victim into interacting with crafted content gain access to some user accounts. Because 3DPassport is the platform's single-sign-on gateway, a successful attack yields high confidentiality and integrity impact and crosses a trust boundary (scope-changed) into downstream 3DEXPERIENCE apps. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation targets the 3DPassport authentication/SSO component of 3DSwymer on 3DEXPERIENCE R2023x through R2026x and requires victim user interaction (CVSS UI:R) - the attacker must induce a legitimate user to interact with attacker-controlled content or a crafted request against the authorization flow; it does not require the attacker to hold any prior credentials (PR:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are partially conflicting and should be weighed rather than taken at face value. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fix described in the Dassault Systèmes advisory at https://www.3ds.com/trust-center/security/security-advisories/cve-2026-16279; the advisory is the source for the exact fixed release/hotfix, which is not included in the input data, so consult it for the precise build per your R2023x-R2026x level (patch available per vendor advisory). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all systems running 3DEXPERIENCE R2023x through R2026x, confirm 3DPassport deployment status, and activate enhanced logging on authentication systems. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-285 – Improper Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today