by Kastro
Paper/Archive/CVE-2026-10094

CVE-2026-10094

Dassault Systèmes SOLIDWORKS Visualize — Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 32.1.321 × 206.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server.

Affected

ProductAffectedFixed inSource
SOLIDWORKS VisualizeSOLIDWORKS Desktop Release 2024 SP0 – SOLIDWORKS Desktop Release 2024 SP5–CNA
SOLIDWORKS VisualizeSOLIDWORKS Desktop Release 2025 SP0 – SOLIDWORKS DesktopRelease 2025 SP5–CNA
SOLIDWORKS VisualizeSOLIDWORKS Desktop Release 2026 SP0 – SOLIDWORKS Desktop Release 2026 SP2.1–CNA

Scores by source

3DS (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

ref3ds.com/trust-center/security/security-advisories/cve-2026-10094