CVE-2026-104989
— UNSCOREDpublic exploit availablePublished 2026-11-09 · Updated 2026-11-09
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 allows remote unauthenticated attackers to execute arbitrary code via redirecting access to libraries
Weaknesses
CWE-427
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2019-16447
- UNSCOREDCVE-2026-102438
- HIGHCVE-2026-103665
- HIGHCVE-2026-103845
- HIGHCVE-2026-104349
- UNSCOREDCVE-2026-104809
- HIGHCVE-2026-106186
- HIGHCVE-2026-107615
Related by shared AI tags and CWE weakness class. Browse the full archive.