CISA warns of two more actively exploited Dassault vulnerabilities

CISA warns that multiple high-impact vulnerabilities in Dassault Systèmes' DELMIA Apriso (including CVE-2025-6205 and CVE-2025-6204) are being actively exploited in the wild; the vendor patched the flaws in August 2025 and CISA has added them to its Known Exploited Vulnerabilities catalog, requiring rapid remediation for federal agencies under BOD 22-01 and urging all affected organizations—especially in automotive, aerospace, electronics and industrial manufacturing—to apply vendor mitigations or patches immediately.