CVE-2025-9976

—

CVSS 3.1

9.0 critical

EPSS

<1%p58

Published

Oct 13, 2025 (Oct 13, 2025)

Modified

Jun 17, 2026

Description

An OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x could allow an attacker to execute arbitrary code on the user's machine.

Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.