VULNERABILITY INTELLIGENCE

CVE-2026-16279

CVSS score9.3 CRITICAL
EPSS probability0.36%
CISA KEVNot currently listed
Published2026-08-27
Last modified2026-09-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Description

An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.

Weakness classification

  • 3DS.Information-Security@3ds.com: CWE-285

Primary references