This vulnerability (CVE-2026-7858) affects multiple versions of Dassault Systèmes Teamwork Cloud - Standard Edition and Magic Collaboration Studio. It arises from unsafe deserialization of untrusted data, which can lead to unauthenticated remote code execution. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with high impact on confidentiality, integrity, and availability. The affected versions include No Magic Release 2022x, 2024x, and 2026x Golden releases. No patch or official remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation could allow an unauthenticated attacker to execute arbitrary code remotely on affected systems, potentially leading to full compromise of the Teamwork Cloud environment. This impacts confidentiality, integrity, and availability of the system. There are no known public exploits currently, but the vulnerability severity is critical due to the ease of exploitation and potential impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected Teamwork Cloud instances, especially from untrusted networks. Monitor vendor communications closely for updates on patches or mitigations. Avoid exposing the affected versions to the internet or untrusted users.