CVE-2026-116099
Received Received - Intake

BlitzBanks Out-of-Bounds Write in Fusion Creators Studio

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: VulDB

Description
A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manipulation can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 1.3R is capable of addressing this issue. It is recommended to upgrade the affected component.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-116099
EUVD
EUVD-2026-109580

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Fusion Creators Studio SCP Containment Breach Multiplayer 1.295

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds write flaw in the BlitzBanks function of the Skynet++ Virtual Machine component of Fusion Creators Studio SCP Containment Breach Multiplayer up to version 1.295. It allows remote attackers to execute a manipulation that writes data outside the intended memory area, potentially leading to arbitrary code execution or system compromise.

Detection Guidance

Check for the installed version of Fusion Creators Studio SCP Containment Breach Multiplayer. If it is below 1.3R, the system is vulnerable. Monitor network traffic for unusual activity related to the Skynet++ Virtual Machine component.

Impact Analysis

An attacker could exploit this to execute arbitrary code on your system remotely with a single click, such as by tricking you into subscribing to a malicious Steam Workshop addon or connecting to a compromised server. This could lead to full system takeover, data theft, or further network compromise.

Compliance Impact

This vulnerability is a remote code execution flaw in a multiplayer game, enabling attackers to execute arbitrary code on a victim's system. It does not directly relate to data handling, privacy, or security controls required by GDPR or HIPAA. Compliance impact would depend on how the affected software is used in a regulated environment, but the vulnerability itself is not a direct violation of these standards.

Mitigation Strategies

Upgrade Fusion Creators Studio SCP Containment Breach Multiplayer to version 1.3R or later immediately. Avoid subscribing to or using untrusted Steam Workshop addons that could exploit this vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116099. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart