CVE-2026-116230

HighCVSS 7.8/10Last modified Oct 31, 2026

Description

A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the component Workshop Scenario Loader. Such manipulation leads to deserialization. The attack may be performed from remote. Upgrading to version 1.24.0.4 is sufficient to fix this issue. It is recommended to upgrade the affected component.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20 CWE-502

Affected software

Vendor	Product	Versions
Ndemic Creations	Plague Inc Evolved	1.24.0.0; 1.24.0.1; 1.24.0.2; 1.24.0.3

References

https://drbloop.dev/blog/one-click-rce-plauge-incExploit, Issue Tracking, Third Party Advisory
https://store.steampowered.com/news/app/246620/view/708909893000628135Release Notes
https://vuldb.com/cve/CVE-2026-116230Third Party Advisory, VDB Entry
https://vuldb.com/submit/1007147Third Party Advisory, VDB Entry
https://vuldb.com/vuln/426279Third Party Advisory, VDB Entry
https://vuldb.com/vuln/426279/ctiThird Party Advisory, VDB Entry

Timeline

Published: Oct 26, 2026
Last modified: Oct 31, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-1162319.9A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1. The impacted element is an unknown function of the component Ser2net. P CVE-2026-1162329.9A weakness has been identified in Oray Pugongying X5 Pro 7.6.1. This affects the function snmp_set of the component SNMP Handler. Executing CVE-2026-1162339.1A security vulnerability has been detected in Oray Pugongying X5 Pro 7.6.1. This impacts an unknown function of the component Dnsmasq. The m CVE-2026-1162349.1A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the file /etc/ipsec.conf of the component I CVE-2026-1162359.1A flaw has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this vulnerability is an unknown functionality of the component L2TP Auth CVE-2026-1162367.2A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugin_init of the file /tmp/upload_f CVE-2026-1162378.4A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of the component Dnsmasq. Performing a manipulation CVE-2026-1162389.8In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit could be bypassed, givin CVE-2026-1162398.8In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an internal account and CVE-2026-116249.4The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DN CVE-2026-1162406.5In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds the absolute path w CVE-2026-1162418.8pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are