CVE-2026-84154

published 2026-09-29

CVE-2026-84154: A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an…

Priority P2 67 critical 9.9 CVSS 3.1

AV N AC L PR L UI N S C C H I H A H

A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary code on the server.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
dassault_syst_mes	geovia_geospatial_data_manager	Release 3DEXPERIENCE R2024x Golden – Release 3DEXPERIENCE R2024x.FP.CFA.2632	—
dassault_syst_mes	geovia_geospatial_data_manager	Release 3DEXPERIENCE R2025x Golden – Release 3DEXPERIENCE R2025x.FP.CFA.2637	—
dassault_syst_mes	geovia_geospatial_data_manager	Release 3DEXPERIENCE R2026x Golden – Release 3DEXPERIENCE R2026x.FP.CFA.2635	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94