Simulink
Monthly
Code execution concealment in MathWorks Simulink before R2026b allows an attacker-crafted .slx model to include blocks that are never visible in the Simulink Editor yet execute when the model is opened. Exploitation is local and requires a victim to open an untrusted model, with high attack complexity and low confidentiality/integrity impact (CVSS 3.6), so the practical risk is low despite the code-execution wording. The supplied data shows a public technical disclosure of the concealed-block technique but no CISA KEV confirmation, and no public exploit identified at time of analysis.
Code execution concealment in MathWorks Simulink before R2026b allows an attacker-crafted .slx model to include blocks that are never visible in the Simulink Editor yet execute when the model is opened. Exploitation is local and requires a victim to open an untrusted model, with high attack complexity and low confidentiality/integrity impact (CVSS 3.6), so the practical risk is low despite the code-execution wording. The supplied data shows a public technical disclosure of the concealed-block technique but no CISA KEV confirmation, and no public exploit identified at time of analysis.