What is the CVSS score of CVE-2026-1283?

CVE-2026-1283 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of SOLIDWORKS are affected by CVE-2026-1283?

SOLIDWORKS eDrawings users running 2025-2026 versions face a critical remote code execution risk when opening malicious EPRT files.

How to fix or mitigate CVE-2026-1283?

Within 24 hours: Identify all SOLIDWORKS eDrawings 2025-2026 installations and restrict access to untrusted EPRT files; issue user advisory prohibiting opening EPRT files from external sources. Within 7 days: Implement network segmentation isolating eDrawings systems from sensitive networks; disable EPRT file type association where possible. Within 30 days: Plan upgrade path to patched release when available; monitor vendor security advisories daily for patch availability and deploy immediately upon release.

SOLIDWORKS CVE-2026-1283

HIGH

Heap-based Buffer Overflow (CWE-122)

2026-01-26 3DS.Information-Security@3ds.com

Buffer Overflow Heap Overflow

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:00 vuln.today

CVE Published

Jan 26, 2026 - 14:15 nvd

HIGH 7.8

DescriptionCVE.org

A Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.

AnalysisAI

Arbitrary code execution in SOLIDWORKS eDrawings 2025-2026 via heap overflow when parsing malicious EPRT files allows attackers to gain full system compromise upon user interaction. The vulnerability requires local file access and user action to trigger, making it a significant risk for organizations using affected SOLIDWORKS versions. No patch is currently available.

Technical ContextAI

Classified as CWE-122 (Heap-based Buffer Overflow). A Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.

Affected ProductsAI

A Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 thro