CVE-2026-34398
- EPSS 0.15%
- Veröffentlicht 17.08.2026 20:51:56
- Zuletzt bearbeitet 19.08.2026 04:17:02
FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposit...
CVE-2026-34399
- EPSS 0.13%
- Veröffentlicht 17.08.2026 20:50:19
- Zuletzt bearbeitet 19.08.2026 04:17:08
FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval() call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template...
- EPSS 0.14%
- Veröffentlicht 17.08.2026 20:47:52
- Zuletzt bearbeitet 19.08.2026 04:17:08
FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp in PropertyPythonObject::Restore() passes the attacker-controlled module attribute from serialized PropertyPythonObject XML direct...
CVE-2026-73235
- EPSS 0.13%
- Veröffentlicht 11.08.2026 19:43:49
- Zuletzt bearbeitet 12.08.2026 23:17:23
FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the Xerces SAX2 XMLReader constructed in src/Base/Reader.cpp by Base::XMLReader::XMLReader() parses attacker-controlled Document.xml from a crafted .FCStd archive ...
CVE-2026-73234
- EPSS 0.16%
- Veröffentlicht 11.08.2026 19:41:13
- Zuletzt bearbeitet 13.08.2026 15:20:11
FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, PropertyFileIncluded::Restore() in src/App/PropertyFile.cpp concatenates an attacker-controlled file or data attribute from Document.xml with the document transien...
CVE-2026-73233
- EPSS 0.15%
- Veröffentlicht 11.08.2026 19:39:18
- Zuletzt bearbeitet 11.08.2026 21:17:51
FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the FEM Displacement Constraint task dialog in src/Mod/Fem/Gui/TaskFemConstraintDisplacement.cpp passes the xDisplacementFormula, yDisplacementFormula, and zDispla...