CVE-2026-116098
Received Received - Intake

Deserialization Flaw in Ravenfield via RFL Custom Map Handler

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: VulDB

Description
A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible. The patch is named EA39 Security Patch. Applying a patch is the recommended action to fix this issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-116098
EUVD
EUVD-2026-109579

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
SteelRaven7 Ravenfield 25407073

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a deserialization flaw in SteelRaven7 Ravenfield 25407073. It exists in the function cacheCoverPoints within the RFL Custom Map Handler/RFLD Custom Map Handler component. Attackers can remotely exploit this by manipulating data to trigger deserialization, potentially leading to arbitrary code execution.

Detection Guidance

The provided CVE data does not include specific detection methods or commands for identifying this vulnerability on a network or system. The vulnerability involves deserialization in the SteelRaven7 Ravenfield game component, but no technical details or detection steps are provided in the context.

Impact Analysis

Remote attackers could exploit this to execute arbitrary code on your system if you run the vulnerable version of Ravenfield. This could allow them to take control of your game client, access sensitive data, or perform other malicious actions.

Compliance Impact

The vulnerability involves deserialization, which can lead to remote code execution. This may compromise data integrity and confidentiality, potentially violating GDPR (data protection) and HIPAA (health data security) if exploited. However, specific compliance impacts are not detailed in the provided context.

Mitigation Strategies

Apply the EA39 Security Patch to the SteelRaven7 Ravenfield component. This patch addresses the deserialization vulnerability in the cacheCoverPoints function of the RFL Custom Map Handler.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116098. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart