VULNERABILITY INTELLIGENCE
CVE-2025-9976
CVSS score9 CRITICAL
EPSS probability0.90%
CISA KEVNot currently listed
Published2025-10-13
Last modified2026-09-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Description
An OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x could allow an attacker to execute arbitrary code on the user's machine.
Weakness classification
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')