AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Dassault SystèmesCVE-2026-14165

Dassault Systèmes Tuleap Enterprise Edition: insecure direct object reference

Dassault Systèmes

CVE-2026-14165 · Published Jul 13, 2026

High7.5
No fix yet
Dassault Systèmes advisory

An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users without authorization.

Affected versions

PackageAffectedFixed in
Tuleap Enterprise Edition
Product
>= 17.0-1, <= 17.0-31No fix yet
>= 17.5-1, <= 17.5-17No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-639

More Dassault Systèmes advisories

All Dassault Systèmes
Critical 9.3Aug 27Dassault Systèmes 3DSwymer: improper authorizationCVE-2026-16279no fix yetHigh 7.7Aug 25Dassault Systèmes Tuleap Enterprise: attacker could gain access to user...CVE-2026-19851no fix yetCritical 10.0Aug 11Dassault Systèmes SIMULIA Execution Engine: unsafe deserializationCVE-2026-17061no fix yetCritical 10.0Jul 28Dassault Systèmes Station Launcher App: unsafe deserializationCVE-2026-11756no fix yetCritical 9.8Jul 8Dassault Systèmes DELMIA Apriso: improper authenticationCVE-2026-9695no fix yetHigh 8.1Jul 1Dassault Systèmes BIOVIA Workbook: race conditionCVE-2026-5120no fix yet