PULSE
ES
FEED
ransomqilin reclama a Bathurst RSL · AU · Hospitalityransomqilin reclama a Creative Universe · AU · Otherransomeverest reclama a PWC · GB · Professional Servicesransomn0n reclama a Performance Ford Inc · US · Retail & E-Commerceransomn0n reclama a Company #109 · Not Foundransomn0n reclama a Company #108 · Not Foundransomn0n reclama a Company #107 · BG · Not Foundransomn0n reclama a Company #106 · Not Foundransomn0n reclama a Company #105 · Not Foundransomn0n reclama a Company #104 · Not Foundransomspacebears reclama a SGLA (Schwartz, Giannini, Lantsberger & Adamson) · US · Professional Servicesransomlamashtu reclama a Hecker Holzsystembau · DE · Manufacturingransomeverest reclama a Linebarger Goggan Blair & Sampson · US · Professional Servicesransomincransom reclama a bereskinparr.com smartbiggar.ca · CA · Professional Servicesransomqilin reclama a Bathurst RSL · AU · Hospitalityransomqilin reclama a Creative Universe · AU · Otherransomeverest reclama a PWC · GB · Professional Servicesransomn0n reclama a Performance Ford Inc · US · Retail & E-Commerceransomn0n reclama a Company #109 · Not Foundransomn0n reclama a Company #108 · Not Foundransomn0n reclama a Company #107 · BG · Not Foundransomn0n reclama a Company #106 · Not Foundransomn0n reclama a Company #105 · Not Foundransomn0n reclama a Company #104 · Not Foundransomspacebears reclama a SGLA (Schwartz, Giannini, Lantsberger & Adamson) · US · Professional Servicesransomlamashtu reclama a Hecker Holzsystembau · DE · Manufacturingransomeverest reclama a Linebarger Goggan Blair & Sampson · US · Professional Servicesransomincransom reclama a bereskinparr.com smartbiggar.ca · CA · Professional Services
← All CVEs
CVE WatchOct 6, 2026

CVE-2026-105043

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will c

CVSS

3.6

Low

EPSS

0.1%

p2

KEV

—

Exploit Today

1

0-100

Published: Oct 2, 2026 · Last modified: Oct 6, 2026 · CWE-451

EPSS · 30d
0.1%EPSS · 30 days0.1%
2026-10-032026-10-21
Technical description

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1094344.3 MED
21.8%
——7Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attackers can render a counterfeit address bar showing a trusted origin over attacker-controlled content after a single user tap, enabling credential harvesting, malware delivery, or social engineering through fake login, update, or payment pages.3dCVE-2026-1097477.3 HIG
19.6%
——6Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.3dCVE-2026-1097368.1 HIG
24.1%
——7Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.3dCVE-2026-1093468.1 HIG
19.2%
——6better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then redeem it at /device/token for a live session token.6dCVE-2026-1063805.4 MED
10.7%
——3UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)16dCVE-2026-1063685.4 MED
9.1%
——3UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)8d