CVE-2025-9976

9.0 criticalEPSS 0.9%

Critical (9.0). EPSS 0.9% chance of exploitation in the next 30 days.

An OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x could allow an attacker to execute arbitrary code on the user's machine.

Severity

CVSS 3.1

9.0 critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2025-10-13
Modified: 2026-09-26
Record from: the NVD, synced 2026-10-19

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2025-9976

Check your stack JSON