LiveThreat Vulnerability Brief — CVE‑2026‑0875
What It Is — Autodesk AutoCAD contains an out‑of‑bounds write flaw in its MODEL file parser. The bug allows an attacker to write past a buffer and execute arbitrary code in the context of the AutoCAD process.
Exploitability — No public exploit is known, but a proof‑of‑concept exists and the vulnerability is rated CVSS 7.8 (High). Exploitation requires a victim to open a crafted .MODEL file or visit a malicious page that triggers the file load.
Affected Products — Autodesk AutoCAD (desktop versions) across all supported operating systems.
TPRM Impact — Engineering, architecture, and manufacturing firms that rely on AutoCAD for design data face a supply‑chain risk: a compromised workstation can be used to steal IP, deploy ransomware, or pivot to other corporate assets.
Recommended Actions — 1) Deploy Autodesk’s security update adsk‑sa‑2026‑0004 immediately. 2) Block or sandbox .MODEL files from untrusted sources via email gateways and web filters. 3) Conduct user awareness training on malicious CAD files. 4) Enforce application whitelisting and monitor AutoCAD processes for anomalous behavior. Source: Zero Day Initiative advisory