EUVD-2026-12419
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Description
A Code Injection vulnerability affecting in SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while opening a specially crafted file.
Analysis
A code injection vulnerability in SOLIDWORKS Desktop releases 2025 through 2026 allows attackers to execute arbitrary code on victim machines by tricking users into opening specially crafted files. The vulnerability requires local access and user interaction but provides complete system compromise with high impact to confidentiality, integrity, and availability (CVSS 7.8). …
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Inventory all SOLIDWORKS Desktop installations across the organization and identify users in versions 2025-2026; communicate the vulnerability to affected teams and restrict file sharing from untrusted sources. Within 7 days: Implement network segmentation to isolate SOLIDWORKS workstations, disable potentially dangerous file import features if operationally feasible, and establish a user awareness campaign warning against opening unexpected CAD files from external parties. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today