CVE-2026-107672High· 8.8▾ TwilightA maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Extension. A malicious actor may exploit this vulnerability to execute arbitrary commands in the cont…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Extension. A malicious actor may exploit this vulnerability to execute arbitrary commands in the context of the current user.
fusion_post_processor_utility >= 5.0.1 < 5.0.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-102637High· 7.1Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
CVE-2026-102636High· 7.1Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
CVE-2026-102638High· 7.1Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
CVE-2026-113775High· 7.8Dynamic Library Loading Process Control in Autodesk Fusion Desktop
CVE-2026-14255Medium· 5.5IFC File Parsing Uncontrolled Recursion in Certain Autodesk Products
CVE-2026-15102High· 7.5ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text