CVE-2026-105043

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution...

CVE-2026-105043

MathWorks Simulink versions prior to R2026b are vulnerable to a flaw where displaying a crafted .slx file can lead to code execution . The vulnerability involves blocks that remain hidden from the Simulink Editor but still execute during processing. No specific exploit details or remediation step...

CVE-2026-105043

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution...

CVE-2026-105043

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution...

PT-2026-104449

Name of the Vulnerable Software and Affected Versions MathWorks Simulink versions prior to R2026b Description Processing a specially crafted .slx file can lead to arbitrary code execution. This occurs through the use of blocks that remain hidden from the Simulink Editor but are still processed by...

EUVD-2023-2126

Malicious code in bioql PyPI...

Jenkins MathWorks Polyspace Plugin vulnerable to arbitrary file read

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier does not restrict the path of the attached files in Polyspace Notification post-build step. This allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file system...

GHSA-Q6CQ-8R4J-6RJ5 Jenkins MathWorks Polyspace Plugin vulnerable to arbitrary file read

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier does not restrict the path of the attached files in Polyspace Notification post-build step. This allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file system...

Design/Logic Flaw

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems...

CVE-2023-37960

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems...

CVE-2023-37960

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems...

CVE-2023-37960

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems...

CVE-2023-37960

Vulnerability CVE-2023-37960: Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier does not restrict the path of the attached files in Polyspace Notification post-build step, allowing attackers with Item/Configure permission to read arbitrary files from the Jenkins controller filesystem.

CVE-2023-37960: Improper Limitation of a Pathname to a Restricted Directory

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems...

Jenkins Plugin: MathWorks Polyspace – Path traversal vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

PT-2023-26209

Name of the Vulnerable Software and Affected Versions Jenkins MathWorks Polyspace Plugin versions 1.0.5 and earlier Description The issue allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file system. This is due to the lack of...

Arbitrary file read vulnerability in mathworks-polyspace

mathworks-polyspace 1.0.5 and earlier does not restrict the path of the attached files in Polyspace Notification post-build step. This allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file system. As of publication of this advisory,...

mathworks.com XSS vulnerability

Open Bug Bounty ID: OBB-578091 Description| Value ---|--- Affected Website:| mathworks.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

se.mathworks.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-578068 Description| Value ---|--- Affected Website:| se.mathworks.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

uk.mathworks.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-578067 Description| Value ---|--- Affected Website:| uk.mathworks.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...