CVE-2026-15102

Awaiting Analysis Awaiting Analysis - Queue

Cleartext Transmission of Sensitive Information in ADP Desktop SDK

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: Autodesk

Description

ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk services.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-15102

EUVD

EUVD-2026-101473

Affected Vendors & Products

Vendor	Product	Version / Range
Autodesk	ADP	Desktop SDK 5.0.0
Autodesk	ADP	Desktop SDK 6.0.0
Autodesk	ADP	Desktop SDK 7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-319	The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Attack-Flow Graph

Executive Summary

ADP Desktop SDK transmits sensitive information in clear text, which means data is not encrypted during transmission. This allows attackers to intercept and access sensitive information, potentially leading to unauthorized access to Autodesk services.

Detection Guidance

This vulnerability involves sensitive information transmitted in clear text. Detection requires monitoring network traffic for unencrypted Autodesk service communications. Use packet capture tools like Wireshark or tcpdump to inspect traffic for ADP Desktop SDK interactions. Look for plaintext transmission of credentials or session tokens.

Impact Analysis

This vulnerability can lead to unauthorized access to Autodesk services, potentially exposing sensitive data such as user credentials or personal information. Attackers could exploit this to gain control over affected systems or steal confidential data.

Compliance Impact

The vulnerability involves transmission of sensitive information in clear text, which could lead to unauthorized access. This may violate compliance requirements under GDPR (data protection) and HIPAA (health data security) due to potential exposure of personal or sensitive data.

Mitigation Strategies

Implement encryption for all sensitive data transmissions. Ensure Autodesk ADP Desktop SDK is updated to the latest version. Monitor network traffic for unencrypted sensitive information.

Hi! I’m here to help you understand CVE-2026-15102. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70