What’s Vulnerable › Vulnerabilities

CVE-2026-85217: Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-10 · updated 2026-09-11
• Weakness: CWE-15

Description

A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings without user notification or consent. A successful exploit may allow an attacker to redirect authenticated Fusion network traffic through an attacker-controlled proxy, potentially exposing sensitive information with the current user.

Affected products

• Autodesk Fusion: from 2705.0.0 before 2705.1.11 — fixed in 2705.1.11

How to fix

Upgrade to a fixed version: Autodesk Fusion 2705.1.11. Check the vendor advisory for mitigations.

References

• https://dl.appstreaming.autodesk.com/production/installers/Fusion%20Client%20Downloader.exe
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0016

Get alerted when CVE-2026-85217 or the next vulnerability affects your stack