CVE-2026-113775High· 7.8▾ TwilightA maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to execute arbitrary code in the context of the current process.
Fusion >= 2705.1.30 < 2706.1.14Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-102637High· 7.1Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
CVE-2026-102636High· 7.1Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
CVE-2026-102638High· 7.1Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
CVE-2025-10244High· 8.7A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting (XSS) vulnerability
CVE-2026-85217High· 8.6Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop
CVE-2026-107672High· 8.8Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility