CVE-2026-116098

HighCVSS 7.8/10Last modified Oct 29, 2026

Description

A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible. The patch is named EA39 Security Patch. Applying a patch is the recommended action to fix this issue.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20 CWE-502

Affected software

Vendor	Product	Versions
SteelRaven7	Ravenfield	25407073

References

https://drbloop.dev/blog/9-year-old-one-click-remote-code-execution-in-ravenfieldExploit, Issue Tracking, Third Party Advisory
https://steamcommunity.com/app/636480/events/590690402783479125Product
https://vuldb.com/cve/CVE-2026-116098Third Party Advisory, VDB Entry
https://vuldb.com/submit/1001274Third Party Advisory, VDB Entry
https://vuldb.com/vuln/426166Third Party Advisory, VDB Entry
https://vuldb.com/vuln/426166/ctiThird Party Advisory, VDB Entry

Timeline

Published: Oct 26, 2026
Last modified: Oct 29, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-1160998.8A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks o CVE-2026-11613.5A vulnerability was detected in pbrong hrms 1.0.1. The affected element is the function UpdateRecruitmentById of the file /handler/recruitme CVE-2026-116108.8A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integri CVE-2026-1161002.4A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the com CVE-2026-1161016.3A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetr CVE-2026-1161026.3A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the fi CVE-2026-1161036.3A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python CVE-2026-1161046.3A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorat CVE-2026-1161053.7A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the com CVE-2026-1161067.3A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of CVE-2026-1161075.4A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. Affected by this issue is the function dfrps_ajax_d CVE-2026-1161084.3A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb_platform/core/openbb_core/app/