CVE-2026-77797

LowCVSS 3.6/10Last modified Sep 24, 2026

Description

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files.

Metrics

CVSS 3.1 3.6/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Weakness enumeration

CWE-20CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 24, 2026
Last modified
Sep 24, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-777986.5Velociraptor contains a deadlock condition that may be triggered by authenticated users. The issue stems from a lock management bug in the uCVE-2026-77804.3A weakness has been identified in Open5GS up to 2.7.7. Affected by this vulnerability is the function udm_state_operational of the file /srcCVE-2026-778016.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 thCVE-2026-778026.3In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, HTTP request smuggling is possible in the proxy requCVE-2026-778033.6In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, front-end request desynchronization is possible in tCVE-2026-778046.6In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, a time-of-check time-of-use (TOCTOU) race condition CVE-2026-778057.9In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tCVE-2026-778069.8SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is relatCVE-2026-778077.5The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to DirectoCVE-2026-77814.3A security vulnerability has been detected in Open5GS up to 2.7.7. Affected by this issue is the function udm_nudm_uecm_handle_amf_registratCVE-2026-778109.9In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplyiCVE-2026-778118.7Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write perm
CVE-2026-77797: Low severity, CVSS 3.6 | Vulnix