FreeCAD

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

FreeCAD records in CISA KEV

No FreeCAD vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2026-51370 CVE-2026-73233

FreeCAD: FEM formula incomplete escape

HIGH 72

FreeCAD is a free and open-source multiplatform 3D parametric modeler.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00199 Published 2026-08-11 Fixed in 1.1.2 CWE-94

TI-2026-51371 CVE-2026-73234

Path traversal in FreeCAD

HIGH 69

FreeCAD is a free and open-source multiplatform 3D parametric modeler.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2026-08-11 Fixed in 1.1.2 CWE-22

TI-2026-26684 CVE-2026-34398

FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench

HIGH 69

FreeCAD is a free and open-source multiplatform 3D parametric modeler.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00224 Published 2026-08-17 Fixed in 1.1.1 CWE-95

TI-2026-27033 CVE-2026-34789

FreeCAD: Arbitrary code execution via unsandboxed PyImport_ImportModule in PropertyPythonObject::Restore

HIGH 66

FreeCAD is a free and open-source multiplatform 3D parametric modeler.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00196 Published 2026-08-17 Fixed in 1.1.2 CWE-94

TI-2026-26685 CVE-2026-34399

FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page

LOW 35

FreeCAD is a free and open-source multiplatform 3D parametric modeler.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00198 Published 2026-08-17 Fixed in 1.1.1 CWE-95

TI-2026-51372 CVE-2026-73235

FreeCAD: XXE file read and SSRF via external entity injection in Document.xml SAX parser

LOW 26

FreeCAD is a free and open-source multiplatform 3D parametric modeler.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00124 Published 2026-08-11 Fixed in 1.1.2 CWE-611

Open these records in search →