{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aautodeskfusion/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:autodesk:fusion:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-102637"},{"cvss":7.1,"id":"CVE-2026-102638"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Fusion"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Autodesk"],"content_html":"\u003cp\u003eA Reflected Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application can be triggered when a user invokes a Fusion protocol URL containing a maliciously crafted HTML payload in the 'documentName' parameter.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eA malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current Autodesk Fusion process.\u003c/p\u003e\n","date_modified":"2026-10-27T18:02:19Z","date_published":"2026-10-27T18:02:06Z","id":"https://feed.craftedsignal.io/briefs/2026-10-autodesk-fusion-xss/","summary":"A Reflected Cross-site Scripting (XSS) vulnerability exists in the Autodesk Fusion desktop application, triggered by a maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL.","title":"Autodesk Fusion: Reflected Cross-site Scripting (CVE-2026-102637)","url":"https://feed.craftedsignal.io/briefs/2026-10-autodesk-fusion-xss/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:autodesk:fusion:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}