CVE-2026-5120
Received Received - Intake

Race Condition in BIOVIA Workbook

Publication date: 2026-07-01

Last updated on: 2026-07-01

Assigner: Dassault Systèmes

Description
A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 could allow a user to access unauthorized data from another user.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-01
Last Modified
2026-07-01
Generated
2026-07-01
AI Q&A
2026-07-01
EPSS Evaluated
N/A
NVD
CVE-2026-5120
EUVD
EUVD-2026-40956

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dassault_systemes biovia_workbook From 2021 (inc) to 2026 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-362 The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Race Condition issue found in Dassault Systèmes BIOVIA Workbook, affecting versions from Release 2021 through Release 2026.

It could allow a user to access data that they are not authorized to see, meaning one user might gain access to another user's data due to the timing flaw in the software.

Impact Analysis

The vulnerability can lead to unauthorized data access, which means sensitive or confidential information could be exposed to users who should not have access.

This can compromise data confidentiality and potentially lead to data breaches or misuse of information.

Mitigation Strategies

The vulnerability affects BIOVIA Workbook versions from Release 2021 through Release 2026 and allows unauthorized data access due to a race condition.

Immediate mitigation steps include consulting Dassault Systèmes' Security Advisories for remediation information and applying any available patches or updates provided by the vendor.

Compliance Impact

The vulnerability allows a user to access unauthorized data from another user, which could lead to unauthorized disclosure of personal or sensitive information.

Such unauthorized data access may impact compliance with data protection regulations like GDPR and HIPAA, which require strict controls to protect personal and health information from unauthorized access.

However, specific details on compliance impact or mitigation measures related to these standards are not provided in the available information.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-5120. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart