CVE-2026-1289
EUVD-2026-5428906.08.2026, 22:17
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, disclose sensitive data, or execute arbitrary code in the context of the current process.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| autodesk | revit | 2024 ≤ 𝑥 < 2024.3.6 |
| autodesk | revit | 2025 ≤ 𝑥 < 2025.4.6 |
| autodesk | revit | 2026 ≤ 𝑥 < 2026.5 |
| autodesk | revit | 2027 ≤ 𝑥 < 2027.2 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| autodesk | autocad | 2027.0.0 ≤ 𝑥 < 2027.1.0 | CNA |
| autodesk | autocad | 2026.0.0 ≤ 𝑥 < 2026.1.2 | CNA |
| autodesk | autocad | 2025.0.0 ≤ 𝑥 < 2025.1.4 | CNA |
| autodesk | autocad | 2024.0.0 ≤ 𝑥 < 2024.1.9 | CNA |
| autodesk | autocad_lt | 2027.0.0 ≤ 𝑥 < 2027.1.0 | CNA |
| autodesk | autocad_lt | 2026.0.0 ≤ 𝑥 < 2026.1.2 | CNA |
| autodesk | autocad_lt | 2025.0.0 ≤ 𝑥 < 2025.1.4 | CNA |
| autodesk | autocad_lt | 2024.0.0 ≤ 𝑥 < 2024.1.9 | CNA |
| autodesk | dwg_trueview | 2027.0.0 ≤ 𝑥 < 2027.1.0 | CNA |
| autodesk | dwg_trueview | 2026.0.0 ≤ 𝑥 < 2026.1.2 | CNA |
| autodesk | dwg_trueview | 2025.0.0 ≤ 𝑥 < 2025.1.4 | CNA |
| autodesk | dwg_trueview | 2024.0.0 ≤ 𝑥 < 2024.1.9 | CNA |
Common Weakness Enumeration