These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A vulnerability in FreeCAD's PropertyPythonObject allows attackers to execute arbitrary Python code via crafted FCStd documents. This issue, fixed in version 1.1.2, poses a significant risk to users of FreeCAD versions prior to 1.1.2. The vulnerability exists due to improper handling of serialized PropertyPythonObject XML, leading to arbitrary Python code execution. Users of affected versions should upgra [truncated]
Arbitrary Python code execution occurs when creating a TechDraw page from a malicious SVG template in FreeCAD's BIM Workbench. The issue is fixed in version 1.1.1. This vulnerability allows attackers to execute arbitrary Python code, potentially disrupting design and modeling workflows. Defenders should assess exposure, especially in deployments processing untrusted SVG templates, and prioritize verificat [truncated]
CVE-2026-34398 is a high-severity vulnerability in FreeCAD's BIM Project Manager Load Template flow, allowing arbitrary Python code execution when loading a malicious BIM project template. The issue is fixed in version 1.1.1. This vulnerability impacts FreeCAD deployments using the BIM Project Manager feature. Defenders should assess exposure and prioritize upgrading to version 1.1.1 or later to prevent p [truncated]
CVE-2026-73235 is a vulnerability in FreeCAD, a free and open-source multiplatform 3D parametric modeler. The issue arises from the Xerces SAX2 XMLReader in src/Base/Reader.cpp, which parses attacker-controlled Document.xml from a crafted .FCStd archive without disabling default external entity resolution or external DTD loading. This allows for potential local file reads or server-side requests when the [truncated]
A vulnerability in FreeCAD's PropertyFileIncluded::Restore() function allows for arbitrary file writing when a crafted .FCStd archive is opened. This issue is fixed in version 1.1.2. The vulnerability arises from the function's failure to properly validate file paths, allowing an attacker to write to arbitrary locations. FreeCAD users, administrators, and developers should assess exposure and prioritize u [truncated]
This CVE debrief provides an executive overview of CVE-2026-73233, a high-severity vulnerability in FreeCAD's FEM Displacement Constraint task dialog. The vulnerability allows arbitrary Python code execution via crafted formula text. Affected product deployments exist in managed environments where untrusted input is processed. The likely operational impact includes potential for arbitrary Python code exec [truncated]