CVE-2026-85217: falha de alta gravidade em Autodesk Fusion
Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 0.2%
A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings without user notification or consent. A successful exploit may allow an attacker to redirect authenticated Fusion network traffic through an attacker-controlled proxy, potentially exposing sensitive information with the current user.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Produtos afetados
Autodesk · FusionCVEs relacionadas — Autodesk Fusion
No mesmo produto, das mais perigosas para as menos.
CVE-2026-10789CRITICALMCP Extension Code Injection Vulnerability in Autodesk Fusion DesktopEPSS 0.7%CVE-2026-0533HIGHStored XSS in Fusion desktop when attempting to delete a fileEPSS 0.7%CVE-2026-0535HIGHStored XSS in Electronic Library Component DescriptionEPSS 0.7%CVE-2026-0534HIGHStored XSS in the value of a part attributeEPSS 0.5%CVE-2025-10244HIGHHTML Payload Stored Cross-Site Scripting (XSS) VulnerabilityEPSS 0.4%CVE-2026-4344HIGHStored Cross-Site Scripting (XSS) Vulnerability in Assembly Component NameEPSS 0.2%