CVE-2026-116099

medium

Description

A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manipulation can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 1.3R is capable of addressing this issue. It is recommended to upgrade the affected component.

References

https://vuldb.com/vuln/426167/cti

https://vuldb.com/vuln/426167

https://vuldb.com/submit/1001276

https://vuldb.com/cve/CVE-2026-116099

https://store.steampowered.com/news/app/1782380/view/670629296167978253

https://steamdb.info/patchnotes/25701366/

https://github.com/drbloop2000/SCP-CBM-RCE/tree/main

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109580

https://drbloop.dev/blog/one-click-remote-code-execution-in-scp-containment-breach-mutiplayer

Details

Source: Mitre, NVD

Published: 2026-10-26

Updated: 2026-10-26

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 6.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Severity: Medium

CVSS v4

Base Score: 5.3

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Severity: Medium