PatchSiren

Luxion CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Luxion CVE published 2026-10-21

CVE-2026-92202

CVE-2026-92202 is a remote code execution vulnerability in Luxion KeyShot BIP file parsing due to an uncontrolled search path element. The vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot, requiring user interaction to exploit. This issue arises from the insecure loading of libraries from unsecured locations during BIP file parsing, which can be l [truncated]