What is CVE-2026-16279?

CVE-2026-16279 is a critical-severity vulnerability in Dassault Systèmes 3dswymer, classified under Improper Authorization. CVSS score: 9.3/10. Published 2026-08-27.

How severe is CVE-2026-16279?

Critical severity. CVSS v3 base score is 9.3 out of 10.

Auth bypass in Dassault Systèmes 3dswymer

CVE-2026-16279

An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.

CVSS v3 metric

CVSS v3 base score 9.3 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N.

Affected products

Dassault Systèmes 3dswymer

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

3DS.Information-Security@3ds.com

Frequently asked questions

What is CVE-2026-16279?: CVE-2026-16279 is a critical-severity vulnerability in Dassault Systèmes 3dswymer, classified under Improper Authorization. CVSS score: 9.3/10. Published 2026-08-27.
How severe is CVE-2026-16279?: Critical severity. CVSS v3 base score is 9.3 out of 10.