Kritik CVSS 9.6
CVE-2026-10789: Fusion: kod enjeksiyonu
Açıklama (NVD)
A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that could allow arbitrary code execution. A successful exploit may allow code to execute with the privileges of the current user.
Özet bilgiler
- Ürün
- Autodesk Fusion
- CVSS v3.1
- 9.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - EPSS
- %0,70 (yüzdelik 53)
- CWE
- CWE-94
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| autodesk-fusion | — | — | 2703.1.20 |