CVE-2026-17061 Dassault Systèmes CVE debrief

Who should care

Organizations using SIMULIA Execution Engine from Release 2023 through Release 2026 should prioritize patching this vulnerability to prevent potential unauthenticated remote code execution attacks. The affected operators are those who use SIMULIA Execution Engine from Release 2023 through Release 2026. The platform impact is significant, and vulnerability management and security teams should take immediate action to mitigate this vulnerability. The security teams should review the official CVE Program record and NIST NVD detail page for further information and plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Technical summary

CVE-2026-17061 is a Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026. This vulnerability could lead to an unauthenticated remote code execution with a CVSS score of 10 and critical severity. The vulnerability is caused by the deserialization of untrusted data, which can allow an attacker to execute arbitrary code on the affected system. The affected product context is SIMULIA Execution Engine from Release 2023 through Release 2026. The defensive impact is significant, and defenders should take immediate action to mitigate this vulnerability.

Defensive priority

Immediate attention is required due to the critical severity and potential for unauthenticated remote code execution.

Recommended defensive actions

• Apply vendor-provided patches or updates for SIMULIA Execution Engine from Release 2023 through Release 2026.
• Restrict access to the affected system to minimize exposure.
• Monitor system logs for suspicious activity.
• Implement compensating controls such as web application firewalls.
• Perform thorough inventory checks to identify affected systems.

Evidence notes

The CVE-2026-17061 record indicates a Deserialization of Untrusted Data vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026, with a CVSS score of 10 and critical severity. Official sources include the CVE Program and NIST NVD. The evidence is limited to the information provided by these sources. Defenders should verify the affected scope, severity, and vendor guidance. The vulnerability affects SIMULIA Execution Engine from Release 2023 through Release 2026. The impact of this vulnerability is potentially significant, and defenders should take immediate action to mitigate it.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.