What is the CVSS score of CVE-2026-7858?

CVE-2026-7858 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Teamwork Cloud are affected by CVE-2026-7858?

Dassault Systèmes Teamwork Cloud and Magic Collaboration Studio CATIA (versions 2022x through 2026x) contain a critical remote code execution vulnerability accessible to any network-connected…

How to fix or mitigate CVE-2026-7858?

Within 24 hours: Inventory all Teamwork Cloud and CATIA Magic Collaboration Studio instances (2022x-2026x) across production, staging, and development; immediately restrict network access via firewall rules to essential personnel only; disable systems if not operationally critical. Within 7 days: Engage Dassault Systèmes support for interim mitigation guidance; deploy network segmentation isolating affected systems with monitored egress controls; implement intrusion detection signatures targeting deserialization attack patterns. Within 30 days: Establish weekly vendor advisory monitoring; test and prepare deployment plan for patch when Dassault Systèmes releases; document business continuity alternatives to these platforms; review and harden all remote access controls.

Teamwork Cloud CVE-2026-7858

EUVD-2026-33583 CRITICAL

Deserialization of Untrusted Data (CWE-502)

2026-06-01 3DS.Information-Security@3ds.com

GHSA-wpwx-h3fg-2jh5

RCE Deserialization

9.8

CVSS 3.1 · Vendor: 3ds

Severity by source

Vendor (3ds) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (3ds) · only source for this CVE.

CVSS VectorVendor: 3ds

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 01, 2026 - 09:30 vuln.today

DescriptionCVE.org

A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthenticated remote code execution.

AnalysisAI

Unauthenticated remote code execution in Dassault Systèmes Teamwork Cloud (No Magic Release 2022x-2026x) and Magic Collaboration Studio (CATIA Magic Release 2022x-2026x) arises from unsafe deserialization of attacker-controlled data. The CVSS 9.8 vector indicates a network-reachable attack with no privileges or user interaction, yielding full confidentiality, integrity, and availability impact, though no public exploit identified at time of analysis and EPSS data was not provided.

Technical ContextAI

Teamwork Cloud and Magic Collaboration Studio are server-side collaboration backends used to host model repositories for MagicDraw, Cameo Systems Modeler, and other CATIA Magic / No Magic modeling tools, typically deployed in engineering and systems-modeling environments. The root cause is CWE-502 (Deserialization of Untrusted Data), a class where a server reconstructs language-native objects (commonly Java, given the No Magic/Cameo ecosystem) from an attacker-supplied stream. When type filtering is absent, gadget chains in the application classpath can be triggered during deserialization to achieve arbitrary code execution in the JVM process. No CPE entries were supplied beyond the vendor's version ranges in the description.

RemediationAI

Patch available per vendor advisory - administrators should consult the 3DS security advisory at https://www.3ds.com/trust-center/security/security-advisories/cve-2026-7858 and upgrade Teamwork Cloud and Magic Collaboration Studio to the fixed build identified for their release train (exact fixed version not published in the input data, so the advisory itself is authoritative). Until patching is complete, restrict network reachability of the Teamwork Cloud / Magic Collaboration Studio service ports to known modeling clients via firewall ACLs or a VPN, which removes unauthenticated internet exposure but does not protect against a malicious insider on the engineering network; additionally, monitor the service's Java process for unexpected child processes and outbound connections, accepting that this is detective rather than preventative. Avoid exposing the collaboration server directly to untrusted networks even after patching.