[ CVE-2026-116098 · Published 26 Oct 2026 ]
Vulnerability in SteelRaven7 Ravenfield
CVSS 7.8
EPSS <1%No fix listed yet
[ Description ]Official description
A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible. The patch is named EA39 Security Patch. Applying a patch is the recommended action to fix this issue.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ References ]References
- drbloop.dev/blog/9-year-old-one-click-remote-code-execution-in-ravenfieldExploitIssue TrackingThird Party Advisory
- steamcommunity.com/app/636480/events/590690402783479125Product
- vuldb.com/cve/CVE-2026-116098Third Party AdvisoryVDB Entry
- vuldb.com/submit/1001274Third Party AdvisoryVDB Entry
- vuldb.com/vuln/426166Third Party AdvisoryVDB Entry
- vuldb.com/vuln/426166/ctiThird Party AdvisoryVDB Entry