SIMULIA Execution Engine EUVD-2026-56155

Consult the Dassault Systèmes advisory at https://www.3ds.com/trust-center/security/security-advisories/cve-2026-17061 and apply the vendor-supplied fix or patched release for your installed version; a specific fixed version number is not present in the available data, so treat patch status as 'Patch available per vendor advisory' and confirm the exact target build directly with 3DS support before deploying. Until patched, remove the Execution Engine from any internet exposure and restrict network access to its service endpoints so that only trusted, authenticated application tiers and administrative hosts can reach it - placing it behind a firewall or reverse proxy that blocks the deserialization-handling endpoint from untrusted clients; the trade-off is that legitimate distributed simulation clients on other subnets may lose connectivity and require allow-listing. Where feasible, front the service with network monitoring/WAF rules that flag serialized-object payloads, accepting that such filtering is best-effort and can be bypassed by novel gadget chains. Do not rely on authentication controls as a mitigation, since the flaw is exploitable without any privileges.