← back
CVE-2026-1288mediumCWE-476

RFA File Parsing Vulnerability in Autodesk Revit

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.1%
exploitation probability
0.1%top 98% of all CVEs
observed exploitation
nono source reports it
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Autodesk · Revit