Description
A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manipulation can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 1.3R is capable of addressing this issue. It is recommended to upgrade the affected component.
Published: 2026-10-25
Score: 5.3 Medium
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Patch Now
AI Analysis

Impact

The flaw is an out‑of‑bounds write in the BlitzBanks function of the Skynet++ Virtual Machine component of Fusion Creators Studio’s SCP Containment Breach Multiplayer. An attacker who can trigger this defect remotely can corrupt memory, which, based on similar memory corruption vulnerabilities, can lead to arbitrary code execution on the affected server.

Affected Systems

Versions of SCP Containment Breach Multiplayer up to and including 1.295 are vulnerable. The vendor has released version 1.3R, which contains the necessary fix for the out‑of‑bounds write.

Risk and Exploitability

The CVSS score of 5.3 indicates moderate severity. A publicly available exploit can be deployed remotely, and the vulnerability is not yet listed in CISA KEV, so the practical risk remains significant for game servers that host the affected component. Operators should treat this as a high‑priority patching issue and apply the latest version as soon as possible.

Generated by OpenCVE AI on October 26, 2026 at 01:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade SCP Containment Breach Multiplayer to version 1.3R or newer to address the out‑of‑bounds write.
  • Deploy the updated binaries across all multiplayer servers and eliminate any older unpatched copies.
  • Configure network controls, such as firewall rules, to restrict external access to the Skynet++ Virtual Machine service until the patch is fully operational.
  • Enable logging and review logs for signs of memory corruption or unauthorized execution attempts, and report anomalies to the vendor.

Generated by OpenCVE AI on October 26, 2026 at 01:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 26 Oct 2026 00:00:00 +0000

Type Values Removed Values Added
Description A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manipulation can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 1.3R is capable of addressing this issue. It is recommended to upgrade the affected component.
Title Fusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write
First Time appeared Fusion Creators Studio
Fusion Creators Studio scp Containment Breach Multiplayer
Weaknesses CWE-119
CWE-787
CPEs cpe:2.3:a:fusion_creators_studio:scp_containment_breach_multiplayer:*:*:*:*:*:*:*:*
Vendors & Products Fusion Creators Studio
Fusion Creators Studio scp Containment Breach Multiplayer
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Fusion Creators Studio Scp Containment Breach Multiplayer
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-25T23:45:16.547Z

Reserved: 2026-10-25T07:16:43.544Z

Link: CVE-2026-116099

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-26T00:17:14.613

Modified: 2026-10-26T00:17:14.613

Link: CVE-2026-116099

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-26T02:00:16Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-787

    Out-of-bounds Write