{"id":"CVE-2026-113775","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-113775","generatedAt":"2026-10-28T02:23:59.495Z","title":"A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application.","description":"A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to execute arbitrary code in the context of the current process.","published":"2026-10-27T17:16:58.000Z","lastModified":"2026-10-27T17:16:58.000Z","status":"Received","sourceIdentifier":"psirt@autodesk.com","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cwe":["CWE-749"],"affected":[],"epss":null,"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unscored. Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-27T17:16:58.000Z","detail":{"score":"7.8","severity":"HIGH","publishedAt":"2026-10-27T17:16:58.393Z"},"summary":"New CVE, high severity (CVSS 7.8)."}],"references":[{"url":"https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.dmg","source":"psirt@autodesk.com"},{"url":"https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.exe","source":"psirt@autodesk.com"},{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0019","source":"psirt@autodesk.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-113775","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}