OpenCVE

An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Dassault Systèmes	Delmia Apriso

No data.

No data.

References

Link	Providers
https://www.3ds.com/trust-center/security/security-advisories/cve-2026-9695

History

Fri, 10 Jul 2026 10:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Dassault Systèmes Dassault Systèmes delmia Apriso
Vendors & Products		Dassault Systèmes Dassault Systèmes delmia Apriso

Wed, 08 Jul 2026 14:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 08 Jul 2026 06:45:00 +0000

Type	Values Removed	Values Added
Description		An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.
Title		Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026
Weaknesses		CWE-287
References		https://www.3ds.com/trust-center/security/security-advisories/cve-2026-9695
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: 3DS

Published: 2026-07-08T05:58:50.169Z

Updated: 2026-07-08T13:46:26.318Z

Reserved: 2026-05-27T11:13:55.994Z

Link: CVE-2026-9695

Vulnrichment

Updated: 2026-07-08T13:46:20.528Z

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-9695", "assignerOrgId": "f5a594e6-46a7-4e60-8a08-0a786e70e433", "state": "PUBLISHED", "assignerShortName": "3DS", "dateReserved": "2026-05-27T11:13:55.994Z", "datePublished": "2026-07-08T05:58:50.169Z", "dateUpdated": "2026-07-08T13:46:26.318Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f5a594e6-46a7-4e60-8a08-0a786e70e433", "shortName": "3DS", "dateUpdated": "2026-07-08T05:58:50.169Z"}, "title": "Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-287", "description": "CWE-287 Improper Authentication", "type": "CWE"}]}], "affected": [{"vendor": "Dassault Syst\u00e8mes", "product": "DELMIA Apriso", "versions": [{"status": "affected", "version": "Release 2020 Golden", "lessThanOrEqual": "Release 2020 SP4", "versionType": "custom"}, {"status": "affected", "version": "Release 2021 Golden", "lessThanOrEqual": "Release 2021 SP3", "versionType": "custom"}, {"status": "affected", "version": "Release 2022 Golden", "lessThanOrEqual": "Release 2022 SP4", "versionType": "custom"}, {"status": "affected", "version": "Release 2023 Golden", "lessThanOrEqual": "Release 2023 SP3", "versionType": "custom"}, {"status": "affected", "version": "Release 2024 Golden", "lessThanOrEqual": "Release 2024 SP2", "versionType": "custom"}, {"status": "affected", "version": "Release 2025 Golden", "lessThanOrEqual": "Release 2025 SP1", "versionType": "custom"}, {"status": "affected", "version": "Release 2026 Golden", "lessThanOrEqual": "Release 2026 SP1", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server."}]}], "references": [{"url": "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-9695"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-08T13:46:02.952002Z", "id": "CVE-2026-9695", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-08T13:46:26.318Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-9695", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-08T13:46:02.952002Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-08T13:46:20.528Z"}}], "cna": {"title": "Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026", "source": {"discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Dassault Syst\u00e8mes", "product": "DELMIA Apriso", "versions": [{"status": "affected", "version": "Release 2020 Golden", "versionType": "custom", "lessThanOrEqual": "Release 2020 SP4"}, {"status": "affected", "version": "Release 2021 Golden", "versionType": "custom", "lessThanOrEqual": "Release 2021 SP3"}, {"status": "affected", "version": "Release 2022 Golden", "versionType": "custom", "lessThanOrEqual": "Release 2022 SP4"}, {"status": "affected", "version": "Release 2023 Golden", "versionType": "custom", "lessThanOrEqual": "Release 2023 SP3"}, {"status": "affected", "version": "Release 2024 Golden", "versionType": "custom", "lessThanOrEqual": "Release 2024 SP2"}, {"status": "affected", "version": "Release 2025 Golden", "versionType": "custom", "lessThanOrEqual": "Release 2025 SP1"}, {"status": "affected", "version": "Release 2026 Golden", "versionType": "custom", "lessThanOrEqual": "Release 2026 SP1"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-9695"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.", "supportingMedia": [{"type": "text/html", "value": "An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-287", "description": "CWE-287 Improper Authentication"}]}], "providerMetadata": {"orgId": "f5a594e6-46a7-4e60-8a08-0a786e70e433", "shortName": "3DS", "dateUpdated": "2026-07-08T05:58:50.169Z"}}}, "cveMetadata": {"cveId": "CVE-2026-9695", "state": "PUBLISHED", "dateUpdated": "2026-07-08T13:46:26.318Z", "dateReserved": "2026-05-27T11:13:55.994Z", "assignerOrgId": "f5a594e6-46a7-4e60-8a08-0a786e70e433", "datePublished": "2026-07-08T05:58:50.169Z", "assignerShortName": "3DS"}, "dataVersion": "5.2"}