CVE-2026-10094

Full vulnerability record from the local CVENow database.

Description

A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server.

Severity

CRITICAL

CVSS score

9.8 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

[email protected]

Published

2026-06-17 13:19:32.123000

Last modified

2026-10-26 12:10:00.130000

View original CVE JSON

{
  "id": "CVE-2026-10094",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-17T13:19:32.123",
  "lastModified": "2026-10-26T12:10:00.130",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de salto de ruta que afecta a SOLIDWORKS Visualize desde SOLIDWORKS Desktop Release 2024 hasta SOLIDWORKS Desktop Release 2026 podría permitir a un atacante escribir archivos arbitrarios en el servidor."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Dassault Systèmes",
          "product": "SOLIDWORKS Visualize",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "SOLIDWORKS Desktop Release 2024 SP0",
              "lessThanOrEqual": "SOLIDWORKS Desktop Release 2024 SP5",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "SOLIDWORKS Desktop Release 2025 SP0",
              "lessThanOrEqual": "SOLIDWORKS DesktopRelease 2025 SP5",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "SOLIDWORKS Desktop Release 2026 SP0",
              "lessThanOrEqual": "SOLIDWORKS Desktop Release 2026 SP2.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-17T13:51:10.450016Z",
          "id": "CVE-2026-10094",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-10094",
      "source": "[email protected]"
    }
  ]
}