CVE-2026-5493

OVERVIEW CVE-2026-5493 is a remote code execution vulnerability in Labcenter Electronics Proteus affecting the application's PDSPRJ file parser. An out-of-bounds write flaw exists due to insufficient validation of user-supplied data during file parsing, enabling attackers to execute arbitrary code on affected systems. The vulnerability requires user interaction, as targets must open a malicious PDSPRJ file or visit a malicious webpage hosting such a file. SEVERITY The vulnerability carries a CVSS score of 7.8 (HIGH) with a local attack vector, requiring no privileges and user interaction. The flaw provides high impact across confidentiality, integrity, and availability, allowing code execution in the current process context. The EPSS score of 0.000630000 indicates limited real-world exploitation activity relative to the broader CVE landscape. EXPLOITATION STATUS There is no current evidence of active exploitation. The vulnerability is not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog and remains inactive on threat tracking lists. While the FAUCET risk score of 49.0/100 suggests moderate concern, the low EPSS score and lack of public exploitation reports indicate this is not currently being weaponized in the wild. No public exploit code availability has been reported.