CVE-2026-16279

Awaiting Analysis Awaiting Analysis - Queue

Improper Authorization in 3DPassport via 3DSwymer

Publication date: 2026-08-27

Last updated on: 2026-09-08

Assigner: Dassault Systèmes

Description

An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-27

Last Modified

2026-09-08

Generated

2026-09-17

AI Q&A

2026-08-27

EPSS Evaluated

2026-09-15

NVD

CVE-2026-16279

EUVD

EUVD-2026-67137

Affected Vendors & Products

Vendor	Product	Version / Range
dassault_systèmes	3dswymer	From 2023x (inc) to 2026x (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This is an Improper Authorization vulnerability in 3DPassport within 3DSwymer software. It affects versions from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x. The flaw allows attackers to gain unauthorized access to some user accounts due to incorrect authorization checks.

Detection Guidance

Detection of CVE-2026-16279 requires checking for unauthorized access attempts to 3DPassport in 3DSwymer. Monitor logs for unusual login patterns or account access from unexpected locations. Verify if any accounts have been compromised by reviewing user activity logs in 3DSwymer.

Impact Analysis

An attacker could exploit this to access your user account without proper authorization. This may lead to unauthorized data access, account takeover, or other malicious activities depending on the account's privileges and stored data.

Compliance Impact

This vulnerability could lead to unauthorized access to user accounts, potentially exposing sensitive personal or health data. This may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information, depending on the data processed by 3DSwymer.

Mitigation Strategies

Apply the latest security patches or updates provided by Dassault Systèmes for 3DSwymer versions R2023x through R2026x. Review and enforce strict authorization policies for 3DPassport access. Monitor user accounts for unauthorized access attempts.

Hi! I’m here to help you understand CVE-2026-16279. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70