{"schema_version":1,"title":"Autodesk Fusion vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in Autodesk Fusion: 0 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-113775, was published on 27 October 2026. 4 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/autodesk-fusion","json_url":"https://junglewise.ai/threats/technologies/autodesk-fusion.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/autodesk-fusion","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":7,"all_time":7,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":4,"last_90_days":4,"last_365_days":7},"latest":[{"cve":"CVE-2026-113775","cvss":7.8,"slug":"cve-2026-113775-a-maliciously-crafted-dynamic-library-when-loaded-from-an","title":"Autodesk Fusion arbitrary code execution via LoadDll","severity":"high","exploited":false,"published_at":"2026-10-27T17:16:58.393+00:00","url":"https://junglewise.ai/threats/cve-2026-113775-a-maliciously-crafted-dynamic-library-when-loaded-from-an"},{"cve":"CVE-2026-102638","cvss":7.1,"slug":"cve-2026-102638-a-maliciously-crafted-html-payload-in-the-description-of-an","title":"Autodesk Fusion stored cross-site scripting in Library Manager","severity":"high","exploited":false,"published_at":"2026-10-27T17:16:55.21+00:00","url":"https://junglewise.ai/threats/cve-2026-102638-a-maliciously-crafted-html-payload-in-the-description-of-an"},{"cve":"CVE-2026-102637","cvss":7.1,"slug":"cve-2026-102637-a-maliciously-crafted-html-payload-in-the-documentname-parameter","title":"Autodesk Fusion reflected XSS in protocol URL handler","severity":"high","exploited":false,"published_at":"2026-10-27T17:16:55.1+00:00","url":"https://junglewise.ai/threats/cve-2026-102637-a-maliciously-crafted-html-payload-in-the-documentname-parameter"},{"cve":"CVE-2026-102636","cvss":7.1,"slug":"cve-2026-102636-a-maliciously-crafted-html-payload-in-a-design-name-when","title":"Autodesk Fusion stored cross-site scripting in design name","severity":"high","exploited":false,"published_at":"2026-10-27T17:16:54.957+00:00","url":"https://junglewise.ai/threats/cve-2026-102636-a-maliciously-crafted-html-payload-in-a-design-name-when"},{"cve":"CVE-2026-4369","cvss":7.1,"epss":0.002,"slug":"cve-2026-4369-a-maliciously-crafted-html-payload-in-an-assembly-variant-name","title":"A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog…","severity":"high","exploited":false,"published_at":"2026-04-14T15:16:38.943+00:00","url":"https://junglewise.ai/threats/cve-2026-4369-a-maliciously-crafted-html-payload-in-an-assembly-variant-name"},{"cve":"CVE-2026-4345","cvss":7.1,"epss":0.002,"slug":"cve-2026-4345-a-maliciously-crafted-html-payload-stored-in-a-design-name-and","title":"A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site…","severity":"high","exploited":false,"published_at":"2026-04-14T15:16:38.64+00:00","url":"https://junglewise.ai/threats/cve-2026-4345-a-maliciously-crafted-html-payload-stored-in-a-design-name-and"},{"cve":"CVE-2026-4344","cvss":7.1,"epss":0.002,"slug":"cve-2026-4344-a-maliciously-crafted-html-payload-in-a-component-name-when","title":"A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and…","severity":"high","exploited":false,"published_at":"2026-04-14T15:16:38.467+00:00","url":"https://junglewise.ai/threats/cve-2026-4344-a-maliciously-crafted-html-payload-in-a-component-name-when"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Autodesk <UNKNOWN>","slug":"unknown","vulnerabilities":45,"url":"https://junglewise.ai/threats/technologies/unknown"},{"name":"Autodesk 3ds Max","slug":"3ds-max","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/3ds-max"},{"name":"Autodesk Revit","slug":"revit","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/revit"},{"name":"Autodesk AutoCAD","slug":"autocad","vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/autocad"},{"name":"Autodesk Advance Steel","slug":"advance-steel","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/advance-steel"},{"name":"Autodesk Autocad Architecture","slug":"autocad-architecture","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/autocad-architecture"},{"name":"Autodesk Autocad Electrical","slug":"autocad-electrical","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/autocad-electrical"},{"name":"Autodesk Autocad Map 3d","slug":"autocad-map-3d","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/autocad-map-3d"},{"name":"Autodesk Autocad Mechanical","slug":"autocad-mechanical","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/autocad-mechanical"},{"name":"Autodesk Autocad Mep","slug":"autocad-mep","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/autocad-mep"},{"name":"Autodesk Autocad Plant 3d","slug":"autocad-plant-3d","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/autocad-plant-3d"},{"name":"Autodesk Civil 3d","slug":"civil-3d","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/civil-3d"}],"technology":{"hub":true,"name":"Autodesk Fusion","slug":"autodesk-fusion","vendor":{"hub":true,"name":"Autodesk","slug":"autodesk","url":"https://junglewise.ai/threats/vendors/autodesk"},"aliases":[],"category":"cad-software","url":"https://junglewise.ai/threats/technologies/autodesk-fusion"},"most_severe":[{"cve":"CVE-2026-113775","cvss":7.8,"slug":"cve-2026-113775-a-maliciously-crafted-dynamic-library-when-loaded-from-an","title":"Autodesk Fusion arbitrary code execution via LoadDll","severity":"high","exploited":false,"published_at":"2026-10-27T17:16:58.393+00:00","url":"https://junglewise.ai/threats/cve-2026-113775-a-maliciously-crafted-dynamic-library-when-loaded-from-an"},{"cve":"CVE-2026-4369","cvss":7.1,"epss":0.002,"slug":"cve-2026-4369-a-maliciously-crafted-html-payload-in-an-assembly-variant-name","title":"A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog…","severity":"high","exploited":false,"published_at":"2026-04-14T15:16:38.943+00:00","url":"https://junglewise.ai/threats/cve-2026-4369-a-maliciously-crafted-html-payload-in-an-assembly-variant-name"},{"cve":"CVE-2026-4345","cvss":7.1,"epss":0.002,"slug":"cve-2026-4345-a-maliciously-crafted-html-payload-stored-in-a-design-name-and","title":"A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site…","severity":"high","exploited":false,"published_at":"2026-04-14T15:16:38.64+00:00","url":"https://junglewise.ai/threats/cve-2026-4345-a-maliciously-crafted-html-payload-stored-in-a-design-name-and"},{"cve":"CVE-2026-4344","cvss":7.1,"epss":0.002,"slug":"cve-2026-4344-a-maliciously-crafted-html-payload-in-a-component-name-when","title":"A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and…","severity":"high","exploited":false,"published_at":"2026-04-14T15:16:38.467+00:00","url":"https://junglewise.ai/threats/cve-2026-4344-a-maliciously-crafted-html-payload-in-a-component-name-when"},{"cve":"CVE-2026-102638","cvss":7.1,"slug":"cve-2026-102638-a-maliciously-crafted-html-payload-in-the-description-of-an","title":"Autodesk Fusion stored cross-site scripting in Library Manager","severity":"high","exploited":false,"published_at":"2026-10-27T17:16:55.21+00:00","url":"https://junglewise.ai/threats/cve-2026-102638-a-maliciously-crafted-html-payload-in-the-description-of-an"},{"cve":"CVE-2026-102637","cvss":7.1,"slug":"cve-2026-102637-a-maliciously-crafted-html-payload-in-the-documentname-parameter","title":"Autodesk Fusion reflected XSS in protocol URL handler","severity":"high","exploited":false,"published_at":"2026-10-27T17:16:55.1+00:00","url":"https://junglewise.ai/threats/cve-2026-102637-a-maliciously-crafted-html-payload-in-the-documentname-parameter"},{"cve":"CVE-2026-102636","cvss":7.1,"slug":"cve-2026-102636-a-maliciously-crafted-html-payload-in-a-design-name-when","title":"Autodesk Fusion stored cross-site scripting in design name","severity":"high","exploited":false,"published_at":"2026-10-27T17:16:54.957+00:00","url":"https://junglewise.ai/threats/cve-2026-102636-a-maliciously-crafted-html-payload-in-a-design-name-when"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}