CVE-2026-15102

High

Description

ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk services.

SeverityHigh

CVSS7.5

Exploit probability—

Product

Autodesk Adp Desktop Sdk

PublishedOct 14, 2026

First seenOct 14, 2026

Weakness typeCWE-319CWE-319

How to fix

Update

autodesk adp_desktop_sdk5.5.55, 6.4.35, 7.0.4 or later

Patches

autodesk.com/products/autodesk-access/overview

Vendor advisories

autodesk.com/trust/security-advisories/adsk-sa-2026-0017

Affected products

Product	Affected versions	Fixed in
autodesk adp_desktop_sdk	5.0.0 ≤ v < 5.5.55, 6.0.0 ≤ v < 6.4.35, 7.0.0 ≤ v < 7.0.4	5.5.55, 6.4.35, 7.0.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.