PT-2026-40343 · Adobe · Substance3D - Designer

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-34664

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Substance3D - Designer versions prior to 15.1.1

Description An improper limitation of a pathname to a restricted directory, known as Path Traversal, allows for arbitrary file system read. This issue enables an attacker to access sensitive files and directories outside the intended scope, provided the victim opens a malicious file.

Recommendations Update to a version later than 15.1.0.

Fix

Path traversal

SSRF

Weakness Enumeration

CWE-22

CWE-918

Related Identifiers

BDU:2026-06899

CVE-2026-34664

Affected Products

Substance3D - Designer

References · 4

• https://helpx.adobe.com/security/products/substance3d_designer/apsb26-52.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06899 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34664 · Security Note
• https://twitter.com/CVEnew/status/2054340965058375957 · Twitter Post