CVE-2026-114117
5.9 MEDIUMpublic exploit availablePublished 2026-10-21 · Updated 2026-10-22
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(msg.data) | K), where K is any nonzero integer literal, is compiled to the constant 1 when used as a ternary expression branch under -O gas (the default) or -O codesize. Affected contracts use the wrong value in storage writes, arithmetic, indexes, return values, or events without warning or revert, which can record deposits incorrectly and lock funds.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-682
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-101963
- MEDIUMCVE-2026-106420
- MEDIUMCVE-2026-106438
- MEDIUMCVE-2026-107721PoC
- LOWCVE-2026-109410PoC
- MEDIUMCVE-2026-115786
- MEDIUMCVE-2026-116541PoC
- UNSCOREDCVE-2026-18459
Related by shared AI tags and CWE weakness class. Browse the full archive.