CVE-2026-102638

A maliciously crafted HTML payload in the description of an electronic library .lbr file, when displayed in the Library Manager after the library is imported, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage thi...