AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Dassault SystèmesCVE-2026-19851

Dassault Systèmes Tuleap Enterprise: attacker could gain access to user...

Dassault Systèmes

CVE-2026-19851 · Published Aug 25, 2026 · updated Aug 28, 2026

High7.7
No fix yet
Dassault Systèmes advisory

A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import.

Affected versions

PackageAffectedFixed in
Tuleap Enterprise Edition
Product
>= 17.0-1, <= 17.0-36No fix yet
>= 17.5-1, <= 17.5-24No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-1393

More Dassault Systèmes advisories

All Dassault Systèmes
Critical 9.9Sep 29Dassault Systèmes GEOVIA Geospatial Data Manager: code injectionCVE-2026-84154no fix yetHigh 8.8Sep 21Dassault Systèmes Tuleap Enterprise Edition: command injectionCVE-2026-84285no fix yetCritical 9.3Aug 27Dassault Systèmes 3DSwymer: improper authorizationCVE-2026-16279no fix yetCritical 10.0Aug 11Dassault Systèmes SIMULIA Execution Engine: unsafe deserializationCVE-2026-17061no fix yetCritical 10.0Jul 28Dassault Systèmes Station Launcher App: unsafe deserializationCVE-2026-11756no fix yetHigh 7.5Jul 13Dassault Systèmes Tuleap Enterprise Edition: insecure direct object referenceCVE-2026-14165no fix yet