CVE-2026-16279: Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x
Published Aug 27, 2026
·Updated
An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.
Affected Software
1 affected component
3DSwymner 3DPassport>=Release 3DEXPERIENCE R2023x<=Release 3DEXPERIENCE R2026x
Event History
Aug 27, 2026
CVE Published
via MITRE·02:11 PM
Data Sourced
via MITRE·02:11 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which releases are affected?
The affected range is Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x for 3DPassport in 3DSwymer.
2
Does exploitation require an existing account or privileged access?
No. The supplied severity vector indicates no privileges are required, although user interaction is required for exploitation.
3
What could an attacker obtain if exploitation succeeds?
An attacker could gain access to some user accounts. The severity vector rates confidentiality and integrity impact as high, with no availability impact indicated.