Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚠️ Vulnerabilidades en productos Autodesk ❗ CVE-2026-0535 ❗ CVE-2026-0534 ❗ CVE-2026-0533 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-autodesk-2/ https://t.co/QGvwDtGmLy
Post summary
The post announces three new Autodesk product CVEs (CVE-2026-0535, CVE-2026-0534, CVE-2026-0533) and links to a CERT page for additional information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | autodesk | fusion | - | - | - |