Vulnerability · Published Jun 17, 2026 · Assigned by 3DS
CVE-2026-10094Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026
Critical 9.8
In plain English
A critical-severity path traversal in SOLIDWORKS Visualize from Dassault Systèmes. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.4%top 67.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dassault Systèmes | SOLIDWORKS Visualize | SOLIDWORKS Desktop Release 2024 SP0 – through SOLIDWORKS Desktop Release 2024 SP5SOLIDWORKS Desktop Release 2025 SP0 – through SOLIDWORKS DesktopRelease 2025 SP5SOLIDWORKS Desktop Release 2026 SP0 – through SOLIDWORKS Desktop Release 2026 SP2.1 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H