CVE-2026-116111

6.3 MEDIUMpublic exploit available

Published 2026-10-26 · Updated 2026-10-26

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the component Lua Sandbox. Executing a manipulation can lead to type confusion. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Weaknesses

CWE-843

Public exploit & PoC references

https://github.com/drbloop2000/Sid-Meier-s-Civilization-V-RCE/blob/main/exploit.lua

All references

https://drbloop.dev/blog/three-click-rce-in-civi-v
https://github.com/drbloop2000/Sid-Meier-s-Civilization-V-RCE/blob/main/exploit.lua
https://vuldb.com/cve/CVE-2026-116111
https://vuldb.com/submit/1004678
https://vuldb.com/vuln/426179
https://vuldb.com/vuln/426179/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2026-0314
HIGHCVE-2026-100792
MEDIUMCVE-2026-100793
UNSCOREDCVE-2026-101912PoC
HIGHCVE-2026-102203
HIGHCVE-2026-102216
HIGHCVE-2026-102299
HIGHCVE-2026-102321

Related by shared AI tags and CWE weakness class. Browse the full archive.