CVE-2026-105043 - Vulnerability Details - OpenCVE

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Mathworks	Simulink

No data.

No data.

References

Link	Providers
https://alexanderboll.dev/disclosures/simulink-vulnerability-concealed-blocks/
https://www.mathworks.com/help/simulink/release-notes.html#mw_81eb54b6-4dfa-42c1-8c3c-e998eff5a8cd
https://www.mathworks.com/products/simulink.html

History

Mon, 05 Oct 2026 17:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sun, 04 Oct 2026 22:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Mathworks Mathworks simulink
Vendors & Products		Mathworks Mathworks simulink

Fri, 02 Oct 2026 23:15:00 +0000

Type	Values Removed	Values Added
Title		Simulink Hidden Blocks Trigger Code Execution

Fri, 02 Oct 2026 21:45:00 +0000

Type	Values Removed	Values Added
Description		MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution.
Weaknesses		CWE-451
References		https://alexanderboll.dev/disclosures/simulink-vulnerability-concealed-blocks/ https://www.mathworks.com/help/simulink/release-notes.html#mw_81eb54b6-4dfa-42c1-8c3c-e998eff5a8cd https://www.mathworks.com/products/simulink.html
Metrics		cvssV3_1 `{'score': 3.6, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-10-02T21:34:14.561Z

Updated: 2026-10-05T16:13:00.917Z

Reserved: 2026-10-02T21:34:13.754Z

Link: CVE-2026-105043

Vulnrichment

Updated: 2026-10-05T16:12:52.962Z

NVD

Status : Awaiting Analysis

Published: 2026-10-02T22:16:54.227

Modified: 2026-10-06T16:08:27.613

Link: CVE-2026-105043

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-105043", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "state": "PUBLISHED", "assignerShortName": "mitre", "dateReserved": "2026-10-02T21:34:13.754Z", "datePublished": "2026-10-02T21:34:14.561Z", "dateUpdated": "2026-10-05T16:13:00.917Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["MATLAB Function block; Simulink Editor block geometry rendering (block Position / ShowName)"], "product": "Simulink", "vendor": "MathWorks", "versions": [{"lessThan": "R2026b", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.6, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-451", "description": "CWE-451 User Interface (UI) Misrepresentation of Critical Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-10-02T21:34:14.561Z"}, "references": [{"url": "https://www.mathworks.com/products/simulink.html"}, {"url": "https://alexanderboll.dev/disclosures/simulink-vulnerability-concealed-blocks/"}, {"url": "https://www.mathworks.com/help/simulink/release-notes.html#mw_81eb54b6-4dfa-42c1-8c3c-e998eff5a8cd"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-05T16:12:46.354621Z", "id": "CVE-2026-105043", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-05T16:13:00.917Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-105043", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-05T16:12:46.354621Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-05T16:12:52.962Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.6, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "MathWorks", "modules": ["MATLAB Function block; Simulink Editor block geometry rendering (block Position / ShowName)"], "product": "Simulink", "versions": [{"status": "affected", "version": "0", "lessThan": "R2026b", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.mathworks.com/products/simulink.html"}, {"url": "https://alexanderboll.dev/disclosures/simulink-vulnerability-concealed-blocks/"}, {"url": "https://www.mathworks.com/help/simulink/release-notes.html#mw_81eb54b6-4dfa-42c1-8c3c-e998eff5a8cd"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "descriptions": [{"lang": "en", "value": "MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-451", "description": "CWE-451 User Interface (UI) Misrepresentation of Critical Information"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-10-02T21:34:14.561Z"}}}, "cveMetadata": {"cveId": "CVE-2026-105043", "state": "PUBLISHED", "dateUpdated": "2026-10-05T16:13:00.917Z", "dateReserved": "2026-10-02T21:34:13.754Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-10-02T21:34:14.561Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}