High severity8.7NVD Advisory· Published Feb 16, 2026· Updated Apr 15, 2026

CVE-2026-2101

Description

A Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 allows an attacker to execute arbitrary script code in user's browser session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dassault Systèmes/ENOVIAvpm Web Accessllm-create
Range: >=1.16 <=19

Patches

Vulnerability mechanics

References

www.3ds.com/trust-center/security/security-advisories/cve-2026-2101nvd

News mentions

No linked articles in our index yet.

cvss	0.565
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000