{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aautodeskadp_desktop_sdk/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:autodesk:adp_desktop_sdk:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-15102"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ADP Desktop SDK"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Autodesk"],"content_html":"\u003cp\u003eThe Autodesk ADP Desktop SDK contains a critical information exposure vulnerability categorized under CVE-2026-15102. The software fails to implement adequate encryption for sensitive data transmissions during its standard operation. This allows an attacker with a position on the local network to perform passive sniffing or man-in-the-middle attacks to intercept sensitive information, including authentication tokens or credentials. If successfully exploited, an adversary can gain unauthorized access to an organization's Autodesk account or cloud-based services, potentially leading to unauthorized data access or project modification. The vulnerability affects the SDK across both Windows and macOS platforms. Organizations using software integrated with the ADP Desktop SDK should audit current versions and monitor for updates from Autodesk to remediate this communication flaw.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability allows unauthorized actors to compromise user credentials and session identifiers. This leads to unauthorized access to the victim's Autodesk environment, risking the exposure of proprietary designs, intellectual property, or project data hosted within the Autodesk ecosystem. The risk is particularly high for environments where developers or engineers frequently interact with cloud-based Autodesk services over shared or untrusted local networks.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMonitor official Autodesk security bulletins for patch releases addressing CVE-2026-15102 and update all software utilizing the ADP Desktop SDK immediately upon availability.\u003c/li\u003e\n\u003cli\u003eEnforce the use of encrypted VPN tunnels or host-based firewalls to restrict local network traffic originating from workstations running Autodesk software until the vulnerability is patched.\u003c/li\u003e\n\u003cli\u003eAudit network traffic patterns from developer workstations to identify unauthorized clear-text communication on non-standard ports typically associated with SDK telemetry or service authentication.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T18:43:14Z","date_published":"2026-10-14T18:43:14Z","id":"https://feed.craftedsignal.io/briefs/2026-10-adp-sdk-info-leak/","summary":"The ADP Desktop SDK improperly transmits sensitive information in clear text, allowing local network attackers to intercept credentials and gain unauthorized access to Autodesk services.","title":"Clear Text Transmission Vulnerability in ADP Desktop SDK","url":"https://feed.craftedsignal.io/briefs/2026-10-adp-sdk-info-leak/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:autodesk:adp_desktop_sdk:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}