What is the CVSS score of CVE-2026-10094?

CVE-2026-10094 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Which versions of SOLIDWORKS Visualize are affected by CVE-2026-10094?

SOLIDWORKS Visualize (bundled in Desktop versions 2024-2026) contains a critical arbitrary file write vulnerability allowing unauthenticated remote attackers to write files to arbitrary server…

How to fix or mitigate CVE-2026-10094?

Within 24 hours: Identify and inventory all systems running SOLIDWORKS Desktop 2024, 2025, or 2026, with priority on internet-facing deployments. Within 7 days: Implement network controls (firewall rules, segmentation) to restrict access to vulnerable systems; disable SOLIDWORKS Visualize component if not operationally required. Within 30 days: Monitor Dassault Systèmes security advisories for patch release; develop and test upgrade plan to patched version or equivalent replacement tool.

SOLIDWORKS Visualize CVE-2026-10094

EUVD-2026-37560 CRITICAL

Path Traversal (CWE-22)

2026-06-17 3DS

Path Traversal Solidworks Visualize Dassault Syst Mes

9.8

CVSS 3.1 · Vendor: 3DS

Severity by source

Vendor (3DS) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

9.8 CRITICAL

Description states remote attacker can write arbitrary files on the server with no stated auth or interaction, and arbitrary write typically yields full C/I/A impact via code execution.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (3DS).

CVSS VectorVendor: 3DS

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 17, 2026 - 08:24 vuln.today

DescriptionCVE.org

A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server.

AnalysisAI

Arbitrary file write via path traversal in SOLIDWORKS Visualize (bundled with SOLIDWORKS Desktop 2024 through 2026) allows remote attackers to place files at attacker-chosen locations on the server. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) indicates remote, unauthenticated exploitation with high impact across confidentiality, integrity, and availability. At time of analysis, no public exploit identified and the issue is not on the CISA KEV list.

Technical ContextAI

SOLIDWORKS Visualize is Dassault Systèmes' photorealistic rendering and visualization tool shipped with the SOLIDWORKS Desktop suite, used to produce images, animations, and interactive content from CAD models. The flaw is classified as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), meaning user-controlled path input is not properly canonicalized or restricted before being used in a file-write operation, allowing '..' sequences or absolute paths to escape the intended directory. The CPE 'cpe:2.3:a:dassault_systèmes:solidworks_visualize:*' confirms the application - not the broader CAD core - is the vulnerable component.

RemediationAI

Patch availability is not explicitly confirmed in the provided data; treat the 3DS advisory at https://www.3ds.com/trust-center/security/security-advisories/cve-2026-10094 as authoritative for the fixed service pack and apply it to all SOLIDWORKS Desktop 2024, 2025, and 2026 installations that include the Visualize component. As compensating controls until patched, restrict network reachability of any Visualize service or file-handling endpoint to trusted hosts via host firewall rules (side effect: breaks remote rendering or collaboration workflows), remove or disable the Visualize component on installs that do not need it, and run the application under a least-privileged account on a filesystem where sensitive directories (Startup folders, web roots, scheduled-task paths) are denied write access via ACLs to blunt path-traversal-to-code-execution chains.