Sparx Enterprise Architect Multiple Vulnerabilities Allow Security Bypass

CERT-Bund published security advisory WID-SEC-2026-1163 disclosing multiple vulnerabilities in Sparx Systems Enterprise Architect affecting all platforms (Linux, UNIX, Windows) prior to version 17.1. The vulnerabilities have a CVSS Base Score of 6.1 (medium), allowing attackers to bypass security measures and disclose information. Remote attack is not possible and mitigations are available.

Organizations using Sparx Enterprise Architect should update to version 17.1 or later to address these vulnerabilities. IT security teams should monitor for available patches and apply mitigations promptly. The vulnerabilities affect any entity using this UML modeling software across development and engineering environments.