EUVD-2026-37560Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessIdentify reachable SOLIDWORKS Visualize host
-
DeliverySend request with traversal path
-
ExploitWrite payload to sensitive directory
-
ExecutionTrigger payload via autorun or scheduled task
-
PersistExecute code in Visualize process context
-
ImpactPivot to CAD assets and host
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Path canonicalization, traversal prevention
MITRE ATT&CK
2 techniques across 2 tactics: Discovery, Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires network reachability to a SOLIDWORKS Visualize instance from the SOLIDWORKS Desktop 2024-2026 product line that exposes the vulnerable file-write code path; per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no authentication, user interaction, or special configuration is documented as required. Practical limiters are that SOLIDWORKS Visualize is primarily a desktop/workstation tool, so impact depends on whether the affected component is actually listening on the network (e.g., a render-service or collaboration mode) in the deployment - verify with the 3DS advisory because the description's 'on the server' wording is not reconciled with the typical desktop deployment model. |
| Impact | The CVSS 3.1 score of 9.8 with AV:N/AC:L/PR:N/UI:N implies a remote, unauthenticated, low-complexity write primitive against a server-side endpoint, which is unusually severe for what is normally marketed as a desktop rendering tool - this discrepancy between the product's typical deployment model and the 'server' wording in the description is the single biggest open question and should be verified against the vendor advisory before treating the network vector as confirmed. EPSS data was not supplied, the CVE is not listed in CISA KEV, no public POC has been identified, and no SSVC decision is available, so real-world exploitation pressure currently appears low despite the headline score. Arbitrary file write at AV:N/PR:N typically chains to remote code execution (e.g., dropping a DLL, scheduled task, or web payload), so if the network vector is correct this should be treated as a high priority; if it turns out to require a local or authenticated workflow, real-world risk drops substantially. |
| Exploit ScenarioDerived | An attacker reachable over the network sends a crafted request containing a manipulated file path (e.g., '..\..\Windows\System32\Tasks\evil.xml' or a path into a web root) to a SOLIDWORKS Visualize file-handling interface, and the server writes attacker-controlled content to that location. The dropped file is then triggered by an existing autorun, scheduled task, or web request, yielding code execution in the context of the Visualize process. No public POC is currently identified, so exploitation would require independent vulnerability research. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jun 17, 2026
Arbitrary file write via path traversal in SOLIDWORKS Visualize (bundled with SOLIDWORKS Desktop 2024 through 2026) allows remote attackers to place files at attacker-chosen locations on the server. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) indicates remote, unauthenticated exploitation with high impact across confidentiality, integrity, and availability. At time of analysis, no public exploit identified and the issue is not on the CISA KEV list.
RemediationAI
Patch availability is not explicitly confirmed in the provided data; treat the 3DS advisory at https://www.3ds.com/trust-center/security/security-advisories/cve-2026-10094 as authoritative for the fixed service pack and apply it to all SOLIDWORKS Desktop 2024, 2025, and 2026 installations that include the Visualize component. As compensating controls until patched, restrict network reachability of any Visualize service or file-handling endpoint to trusted hosts via host firewall rules (side effect: breaks remote rendering or collaboration workflows), remove or disable the Visualize component on installs that do not need it, and run the application under a least-privileged account on a filesystem where sensitive directories (Startup folders, web roots, scheduled-task paths) are denied write access via ACLs to blunt path-traversal-to-code-execution chains.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
SOLIDWORKS Visualize is Dassault Systèmes' photorealistic rendering and visualization tool shipped with the SOLIDWORKS Desktop suite, used to produce images, animations, and interactive content from CAD models. The flaw is classified as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), meaning user-controlled path input is not properly canonicalized or restricted before being used in a file-write operation, allowing '..' sequences or absolute paths to escape the intended directory. The CPE 'cpe:2.3:a:dassault_systèmes:solidworks_visualize:*' confirms the application - not the broader CAD core - is the vulnerable component.
Know when Solidworks Visualize gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description states remote attacker can write arbitrary files on the server with no stated auth or interaction, and arbitrary write typically yields full C/I/A impact via code execution.
Primary rating from Vendor (3DS).
CVSS VectorVendor: 3DS
DescriptionCVE.org
A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server.
Executive ViewAI
SOLIDWORKS Visualize (bundled in Desktop versions 2024-2026) contains a critical arbitrary file write vulnerability allowing unauthenticated remote attackers to write files to arbitrary server locations. No public exploit identified at time of analysis; however, lack of vendor patch creates immediate operational risk for all organizations running affected versions.
No vendor-released patch identified at time of analysis. Interim mitigations: restrict network access to affected systems via firewall segmentation; disable SOLIDWORKS Visualize if operationally feasible; implement file system activity monitoring to detect anomalous writes; require strong authentication and network-level controls for any necessary remote access; maintain offline upgrade capability for rapid patching when vendor release available.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.
GitHub PoC
Exploit-DB