Is CVE-2026-15102 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-15102 being exploited in the wild.

How severe is CVE-2026-15102?

High severity, with a CVSS score of 7.5, published 14 October 2026.

Is there a fix for CVE-2026-15102?

Yes: fixed in . Until then: Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-15102 attacked?

It is attacked over the network.

Am I affected by CVE-2026-15102?

Check whether you run Autodesk ADP Desktop SDK. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-15102: Autodesk ADP Desktop SDK cleartext transmission of sensitive information

CVE-2026-15102 · Severity: high · CVSS 7.5 · Published 2026-10-14

The Autodesk ADP Desktop SDK transmits sensitive information in cleartext over the network, allowing attackers to intercept and read data in transit. An attacker on the network could capture authentication credentials or other sensitive data, leading to unauthorized access to Autodesk services and user accounts.

Vendors: Autodesk.

Quick answers

Is CVE-2026-15102 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-15102 being exploited in the wild.
How severe is CVE-2026-15102?: High severity, with a CVSS score of 7.5, published 14 October 2026.
Which products and versions are affected?: Autodesk ADP Desktop SDK.
Is there a fix for CVE-2026-15102?: Yes: fixed in <UNKNOWN>. Until then: <UNKNOWN> Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-15102 attacked?: It is attacked over the network.
Am I affected by CVE-2026-15102?: Check whether you run Autodesk ADP Desktop SDK. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: <UNKNOWN>

Technical details

The ADP Desktop SDK fails to encrypt sensitive information during transmission, making it vulnerable to network eavesdropping. An attacker with network access can capture cleartext data exchanged between the SDK and Autodesk services, potentially obtaining credentials or authentication tokens. A fix is referenced in Autodesk security advisory ADSK-SA-2026-0017.

Affected products

Autodesk ADP Desktop SDK

Timeline

2026-10-14: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.