CVE-2026-4931

HighCVSS 8.6/10Last modified Oct 26, 2026

Description

Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt position for a negligible asset cost.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Weakness enumeration

CWE-681

Affected software

VendorProductVersions
MarginalMarginal Smart Contract1

References

Timeline

Published
Apr 7, 2026
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-493108.6Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service CVE-2026-493116.2Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availabilCVE-2026-493124.0Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentialCVE-2026-493135.5Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiCVE-2026-493147.3OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availabiliCVE-2026-493157.1DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-493164.6Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-networCVE-2026-493172.4Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an CVE-2026-493182.4Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an CVE-2026-493196.5Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable tCVE-2026-49324.6IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the TranCVE-2026-493224.3Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-net
CVE-2026-4931: High severity, CVSS 8.6 | Vulnix