AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Dassault SystèmesCVE-2026-84285

Dassault Systèmes Tuleap Enterprise Edition: command injection

Dassault Systèmes

CVE-2026-84285 · Published Sep 21, 2026

High8.8
No fix yet
Dassault Systèmes advisory

An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server.

Affected versions

PackageAffectedFixed in
Tuleap Enterprise Edition
Product
>= 17.3-1, <= 17.3-12No fix yet
>= 17.5-1, <= 17.5-28No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More Dassault Systèmes advisories

All Dassault Systèmes
Critical 9.9Sep 29Dassault Systèmes GEOVIA Geospatial Data Manager: code injectionCVE-2026-84154no fix yetCritical 9.3Aug 27Dassault Systèmes 3DSwymer: improper authorizationCVE-2026-16279no fix yetHigh 7.7Aug 25Dassault Systèmes Tuleap Enterprise: attacker could gain access to user...CVE-2026-19851no fix yetCritical 10.0Aug 11Dassault Systèmes SIMULIA Execution Engine: unsafe deserializationCVE-2026-17061no fix yetCritical 10.0Jul 28Dassault Systèmes Station Launcher App: unsafe deserializationCVE-2026-11756no fix yetHigh 7.5Jul 13Dassault Systèmes Tuleap Enterprise Edition: insecure direct object referenceCVE-2026-14165no fix yet