Bentley Systems

Products

ProductCVEsExploitedLatest
MicroStation Connect2–Jan 6, 2023
iTwin Platform1–Apr 2, 2026

Exploited and recent CVEs

  • CVE-2026-35383 Medium 6.5 Bentley Systems iTwin Platform exposed access token 0.3%
  • CVE-2022-41613 High 7.8 Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to an Out-of-Bounds Read when when parsing DGN files, which may allow an attacker to crash the product, disclose se 0.2%
  • CVE-2022-40201 High 7.8 Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to a Stack-Based Buffer Overflow when a malformed design (DGN) file is parsed. This may allow an attacker to execut 0.4%