A deserialization of untrusted data vulnerability (CVE-2026-7858) affects Teamwork Cloud from No Magic Release 2022x through 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through 2026x. The vulnerability could lead to unauthenticated remote code execution, making it a critical security issue. Multiple product versions spanning several years are affected by this deserialization flaw. The vulnerability allows attackers to execute arbitrary code without authentication. Both No Magic and CATIA Magic product lines are impacted across multiple release cycles.