Reflected Cross-site Scripting Vulnerability in Autodesk Fusion Application

CVE-2026-102637

What is CVE-2026-102637?

A reflected cross-site scripting vulnerability has been identified in the Autodesk Fusion desktop application. Specifically, an attacker can exploit this flaw by crafting a malicious HTML payload targeting the documentName parameter within a Fusion protocol URL. When this URL is triggered by the user, it can lead to unauthorized access, allowing the malicious actor to potentially read local files or execute arbitrary code within the application's process. Users are advised to follow recommended security measures and apply updates promptly to mitigate potential risks.

References