CVE-2026-3392

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A weakness has been identified in FascinatedBox lily up to 2.3. The affected element is the function eval_tree of the file src/lily_emitter.c. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404 CWE-476

Affected software

No affected versions have been published.

Timeline

Published: Mar 1, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-339203.5A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of t CVE-2026-339215.2The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to ev CVE-2026-339226.0A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to insufficient validatio CVE-2026-339294.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples. This issue affects CVE-2026-33937.8A security vulnerability has been detected in jarikomppa soloud up to 20200207. The impacted element is the function SoLoud::Wav::loadflac o CVE-2026-339305.9Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handling, so an over-long CVE-2026-339316.5OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an Insecu CVE-2026-339325.4OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a stored CVE-2026-339336.1OpenEMR is a free and open source electronic health records and medical practice management application. Starting in version 7.0.2.1 and pri CVE-2026-339344.3OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have a mi CVE-2026-339357.5MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.72, an unauthenticated attacker can lock out a CVE-2026-339365.3The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital