CVE-2026-15102

Published: Oct 14, 2026Modified: Oct 16, 2026

7.5

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 6.0

Source: psirt@autodesk.com (Secondary)

Description

ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk services.

Related CWEs

CWE-319

Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (2)

https://www.autodesk.com/products/autodesk-access/overview

Source: psirt@autodesk.com

https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0017

Source: psirt@autodesk.com

Timeline

No history available yet.