CVE-2026-116099

HighCVSS 8.8/10Last modified Oct 29, 2026

Description

A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manipulation can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 1.3R is capable of addressing this issue. It is recommended to upgrade the affected component.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-787

Affected software

Vendor	Product	Versions
Fusion Creators Studio	SCP Containment Breach Multiplayer	1.295

References

https://drbloop.dev/blog/one-click-remote-code-execution-in-scp-containment-breach-mutiplayerExploit, Issue Tracking, Third Party Advisory
https://github.com/drbloop2000/SCP-CBM-RCE/tree/mainExploit, Issue Tracking
https://steamdb.info/patchnotes/25701366/Patch
https://store.steampowered.com/news/app/1782380/view/670629296167978253Issue Tracking
https://vuldb.com/cve/CVE-2026-116099Third Party Advisory, VDB Entry
https://vuldb.com/submit/1001276Third Party Advisory, VDB Entry
https://vuldb.com/vuln/426167Third Party Advisory, VDB Entry
https://vuldb.com/vuln/426167/ctiThird Party Advisory, VDB Entry

Timeline

Published: Oct 26, 2026
Last modified: Oct 29, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-11613.5A vulnerability was detected in pbrong hrms 1.0.1. The affected element is the function UpdateRecruitmentById of the file /handler/recruitme CVE-2026-116108.8A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integri CVE-2026-1161002.4A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the com CVE-2026-1161016.3A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetr CVE-2026-1161026.3A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the fi CVE-2026-1161036.3A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python CVE-2026-1161046.3A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorat CVE-2026-1161053.7A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the com CVE-2026-1161067.3A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of CVE-2026-1161075.4A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. Affected by this issue is the function dfrps_ajax_d CVE-2026-1161084.3A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb_platform/core/openbb_core/app/CVE-2026-1161096.3A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleton.setConnections of