Security Flaw in Sparx Enterprise Architect Software

CVE-2026-42098

What is CVE-2026-42098?

Sparx Enterprise Architect software exhibits a security vulnerability that allows an authenticated user to alter client behavior using a debugger. This flaw enables the attacker to log in as any other user or administrator, thereby gaining the ability to modify repository contents without authorization. Although the vendor was made aware of this issue, no specific details regarding vulnerable versions were provided, apart from the confirmation that version 17.1 and earlier are at risk. Other versions have not been assessed, leaving the potential for wider exposure.

References