What is the CVSS score of CVE-2026-1284?

CVE-2026-1284 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of SOLIDWORKS are affected by CVE-2026-1284?

A critical vulnerability in SOLIDWORKS eDrawings (versions 2025-2026) allows attackers to execute arbitrary code by distributing malicious EPRT files to users.

How to fix or mitigate CVE-2026-1284?

Within 24 hours: Issue urgent communication prohibiting opening EPRT files from untrusted sources and disable eDrawings if not operationally critical. Within 7 days: Inventory all SOLIDWORKS 2025-2026 deployments and restrict file sharing to pre-approved internal sources only. Within 30 days: Monitor vendor for patch availability; plan immediate deployment upon release or evaluate alternative CAD tools if patch timeline is unacceptable.

SOLIDWORKS CVE-2026-1284

HIGH

Out-of-bounds Write (CWE-787)

2026-01-26 3DS.Information-Security@3ds.com

Buffer Overflow RCE

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:00 vuln.today

CVE Published

Jan 26, 2026 - 14:15 nvd

HIGH 7.8

DescriptionCVE.org

An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.

AnalysisAI

Arbitrary code execution in SOLIDWORKS eDrawings 2025-2026 via out-of-bounds write when parsing specially crafted EPRT files. An attacker can exploit this vulnerability by distributing a malicious file that executes code with user privileges upon opening. No patch is currently available.

Technical ContextAI

Classified as CWE-787 (Out-of-bounds Write). An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.

Affected ProductsAI

An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Re