CVE-2026-116099

Fusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write

View on CVE.org
Published Oct 25, 2026 CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manipulation can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 1.3R is capable of addressing this issue. It is recommended to upgrade the affected component.

Analysis

AI-generated

Technical impact

The flaw is an out‑of‑bounds write in the BlitzBanks function of the Skynet++ Virtual Machine component of Fusion Creators Studio’s SCP Containment Breach Multiplayer. An attacker who can trigger this defect remotely can corrupt memory, which, based on similar memory corruption vulnerabilities, can lead to arbitrary code execution on the affected server.

Affected Systems

Versions of SCP Containment Breach Multiplayer up to and including 1.295 are vulnerable. The vendor has released version 1.3R, which contains the necessary fix for the out‑of‑bounds write.

Risk and Exploitability

The CVSS score of 5.3 indicates moderate severity. A publicly available exploit can be deployed remotely, and the vulnerability is not yet listed in CISA KEV, so the practical risk remains significant for game servers that host the affected component. Operators should treat this as a high‑priority patching issue and apply the latest version as soon as possible.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade SCP Containment Breach Multiplayer to version 1.3R or newer to address the out‑of‑bounds write.
  • Deploy the updated binaries across all multiplayer servers and eliminate any older unpatched copies.
  • Configure network controls, such as firewall rules, to restrict external access to the Skynet++ Virtual Machine service until the patch is fully operational.
  • Enable logging and review logs for signs of memory corruption or unauthorized execution attempts, and report anomalies to the vendor.

Generated by OpenCVE AI on October 26, 2026 at 01:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Fcs-ex
Fcs-ex scp\
CPEs cpe:2.3:a:fcs-ex:scp\:containment_breach_multiplayer:*:*:*:*:*:steam:*:*
Vendors & Products Fcs-ex
Fcs-ex scp\
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manipulation can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 1.3R is capable of addressing this issue. It is recommended to upgrade the affected component.
Title Fusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write
First Time appeared Fusion Creators Studio
Fusion Creators Studio scp Containment Breach Multiplayer
Weaknesses CWE-119
CWE-787
CPEs cpe:2.3:a:fusion_creators_studio:scp_containment_breach_multiplayer:*:*:*:*:*:*:*:*
Vendors & Products Fusion Creators Studio
Fusion Creators Studio scp Containment Breach Multiplayer
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-787

    Out-of-bounds Write

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Oct 26, 2026, 4:38 PM
Reserved
Oct 25, 2026, 7:16 AM

View source JSON

Updated
Oct 26, 2026, 4:08 PM

JSON

Status
Analyzed
Published
Oct 26, 2026, 12:17 AM
Modified
Oct 29, 2026, 3:04 PM

View source JSON

No data.

Updated
Oct 26, 2026, 6:52 PM

JSON