CVE-2026-105043

Published: Ott 03, 2026 Last Modified: Ott 03, 2026
ExploitDB:
Other exploit source:
Google Dorks:
LOW 3,6
Source: [email protected]
Attack Vector: local
Attack Complexity: high
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: none

Description

AI Translation Available

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution.

451

User Interface (UI) Misrepresentation of Critical Information

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Non-Repudiation Access Control
Potential Impacts:
Hide Activities Bypass Protection Mechanism
Applicable Platforms
All platforms may be affected
View CWE Details
https://alexanderboll.dev/disclosures/simulink-vulnerabilit…
https://alexanderboll.dev/disclosures/simulink-vulnerability-concealed-blocks/
https://www.mathworks.com/help/simulink/release-notes.html#…
https://www.mathworks.com/help/simulink/release-notes.html#mw_81eb54b6-4dfa-42c…
https://www.mathworks.com/products/simulink.html
https://www.mathworks.com/products/simulink.html