Search vulnerabilities

Results 1

CVE-2026-56137

OS Command Injection via Malicious Save File in RPG MAKER MV and MZ

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed.

CVSS 4.0 · 8.4 High EPSS 1.1% KEV · Not listed