Fusion
- Software type
- CAD and design
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/10/2026, Fusion recorded 1 security vulnerability in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Fusion and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-85217Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion DesktopCVE-2026-10789MCP Extension Code Injection Vulnerability in Autodesk Fusion DesktopCVE-2026-4344Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Component NameCVE-2026-4345Stored Cross-Site Scripting (XSS) Vulnerability in Design NameCVE-2026-4369Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant Name| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-85217Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop | Exploitation statusNot exploited | FixYes |
| SeverityHigh |
CVE-2026-10789MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop | Exploitation statusNot exploited | FixYes | Published06/22/2026 | SeverityCritical |
|---|
CVE-2026-4344Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Component Name | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityHigh |
|---|
CVE-2026-4345Stored Cross-Site Scripting (XSS) Vulnerability in Design Name | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityHigh |
|---|
CVE-2026-4369Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant Name | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityHigh |
|---|
CVE-2026-0535Stored XSS in Electronic Library Component Description | Exploitation statusNot exploited | FixYes | Published01/22/2026 | SeverityHigh |
|---|
CVE-2026-0534Stored XSS in the value of a part attribute | Exploitation statusNot exploited | FixYes | Published01/22/2026 | SeverityHigh |
|---|
CVE-2026-0533Stored XSS in Fusion desktop when attempting to delete a file | Exploitation statusNot exploited | FixYes | Published01/22/2026 | SeverityHigh |
|---|
CVE-2025-10244HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2025 | SeverityHigh |
|---|
CVE-2021-40165CVE-2021-40165 | Exploitation statusNot confirmed | FixNo | Published10/07/2022 | SeverityUnknown |
|---|
14 Results | Page 1 of 2