All 6 CVE vulnerabilities found in FreeCAD, with AI-generated Chinese analysis, references, and POCs.
Vendor: FreeCAD
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-34398 | FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench CWE-95 | 7.8 | High | 2026-08-17 |
| CVE-2026-34399 | FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page CWE-95 | 7.8 | High | 2026-08-17 |
| CVE-2026-34789 | FreeCAD: Arbitrary code execution via unsandboxed PyImport_ImportModule in PropertyPythonObject::Restore CWE-94 | 7.0 | High | 2026-08-17 |
| CVE-2026-73235 | FreeCAD: XXE file read and SSRF via external entity injection in Document.xml SAX parser CWE-611 | 6.1 | Medium | 2026-08-11 |
| CVE-2026-73234 | FreeCAD: FCStd path traversal allows arbitrary file write via unsanitized file attribute in PropertyFileIncluded::Restore() CWE-22 | 7.8 | High | 2026-08-11 |
| CVE-2026-73233 | FreeCAD: FEM formula incomplete escape CWE-94 | 8.5 | High | 2026-08-11 |
All 6 known CVE vulnerabilities affecting FreeCAD with full Chinese analysis, references, and POCs where available.