CVE-2026-1288RFA File Parsing Vulnerability in Autodesk Revit

Description

A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0007 vendor-advisoryVendor Advisory
• https://www.autodesk.com/products/autodesk-access/overview patchProduct