Cpe:2.3:a:autodesk:fusion:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aautodeskfusion/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 18:02:06 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAutodesk Fusion: Reflected Cross-site Scripting (CVE-2026-102637)https://feed.craftedsignal.io/briefs/2026-10-autodesk-fusion-xss/Tue, 27 Oct 2026 18:02:06 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-autodesk-fusion-xss/A Reflected Cross-site Scripting (XSS) vulnerability exists in the Autodesk Fusion desktop application, triggered by a maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL.A Reflected Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application can be triggered when a user invokes a Fusion protocol URL containing a maliciously crafted HTML payload in the 'documentName' parameter.

Impact

A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current Autodesk Fusion process.

]]>highadvisory