CVE-2026-14165: Dassault Systèmes Tuleap Enterprise Edition

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users without authorization.

Affected products

• Dassault Systèmes Tuleap Enterprise Edition: from 17.0-1, up to and including 17.0-31; from 17.5-1, up to and including 17.5-17

Published 2026-07-13. Last modified 2026-07-13.