CVE-2026-0533

CVE-2026-0533 is a Stored Cross-site Scripting (XSS) vulnerability affecting the Autodesk Fusion desktop application. A malicious HTML payload embedded in a design name can be triggered when a user clicks the delete confirmation dialog, potentially allowing an attacker to read local files or execute arbitrary code. This vulnerability carries a high CVSS score of 8.1, indicating a severe risk with a network attack vector and low attack complexity, requiring user interaction for exploitation. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.