ZDI-26-112
HIGH 7.8
Published
Feb 19, 2026
Dassault Systèmes eDrawings Viewer EPRT File Parsing Uninitialized Variable Remote Code Execution Vulnerability
Dassault
A remote code execution vulnerability (CVE-2026-1333) exists in Dassault Systèmes eDrawings Viewer that allows attackers to execute arbitrary code if a user opens a malicious file or visits a compromised webpage. This is a high-severity issue with a CVSS score of 7.8, giving attackers significant control over affected systems. Security teams should prioritize patching eDrawings Viewer installations and implement controls to restrict file execution and web access until updates are available.