CVE-2026-16279

CVSS 9.3 (critical) · published 2026-08-27

An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.

Weakness: CWE-285

Source: NVD CVE-2026-16279

References

• https://www.3ds.com/trust-center/security/security-advisories/cve-2026-16279

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.