LOW 3.6 NVD
CVE-2026-105043
MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution.
MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution.
References
- https://alexanderboll.dev/disclosures/simulink-vulnerability-concealed-blocks/
- https://www.mathworks.com/help/simulink/release-notes.html#mw_81eb54b6-4dfa-42c1-8c3c-e998
- https://www.mathworks.com/products/simulink.html
This low severity vulnerability with a CVSS score of 3.6 was published on 2026-10-02 via NVD.
vulnfeed aggregates 9972 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.