CVE-2026-17061
Received Received - Intake

Deserialization Flaw in SIMULIA Execution Engine Allows RCE

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: Dassault Systèmes

Description
A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-17061
EUVD
EUVD-2026-56155

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dassault_systemes simulia_execution_engine From 2023 (inc) to 2026 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Deserialization of Untrusted Data vulnerability in Dassault Systèmes SIMULIA Execution Engine. It affects versions from Release 2023 through Release 2026 and could allow unauthenticated remote code execution due to improper handling of serialized data.

Detection Guidance

Detection of this vulnerability requires checking the version of SIMULIA Execution Engine installed on your system. Compare the installed version against the affected releases (2023 through 2026). If your version falls within this range, the system is potentially vulnerable. No specific commands are provided in the available resources.

Impact Analysis

An attacker could exploit this to execute arbitrary code remotely without authentication. This may lead to full system compromise, data theft, or disruption of services relying on the SIMULIA Execution Engine.

Compliance Impact

This vulnerability could lead to unauthorized remote code execution, potentially exposing sensitive data processed by SIMULIA Execution Engine. Such breaches may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Apply patches or updates provided by Dassault Systèmes for SIMULIA Execution Engine versions from Release 2023 through Release 2026 as soon as possible to address the deserialization vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17061. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart