Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Autodesk Fusion — autodesk.com/trust/security-advisories/adsk-sa-2026-0001 Clear all filters
TI-2026-00338 CVE-2026-0535 · GHSA-j822-wp67-3ww6

Stored XSS in Electronic Library Component Description

Priority LOW 38

A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00663 Published 2026-01-22 Fixed in 2606.1.21 CWE-79
TI-2026-00337 CVE-2026-0534 · GHSA-4rcj-vhqg-6g52

Stored XSS in the value of a part attribute

Priority LOW 38

A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00533 Published 2026-01-22 Fixed in 2606.1.21 CWE-79
TI-2026-00336 CVE-2026-0533 · GHSA-c224-r83q-9v98

Stored XSS in Fusion desktop when attempting to delete a file

Priority LOW 38

A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion deskto…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00677 Published 2026-01-22 Fixed in 2606.1.21 CWE-79