๐Ÿ” CVE Alert

CVE-2026-105043

LOW 3.6
CVSS Score
3.6
EPSS Score
0.0%
EPSS Percentile
0th

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution.

CWE CWE-451
Vendor mathworks
Product simulink
Published Oct 2, 2026
Stay Ahead of the Next One

Get instant alerts for mathworks simulink

Be the first to know when new low vulnerabilities affecting mathworks simulink are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Affected Versions

MathWorks / Simulink
0 < R2026b

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
mathworks.com: https://www.mathworks.com/products/simulink.html alexanderboll.dev: https://alexanderboll.dev/disclosures/simulink-vulnerability-concealed-blocks/ mathworks.com: https://www.mathworks.com/help/simulink/release-notes.html#mw_81eb54b6-4dfa-42c1-8c3c-e998eff5a8cd