Dashboard / CVE-2026-116370

CVE-2026-116370

LOW
INFO Priority: 0.01 BB Relevance: 54/100
Published: 2026-10-26 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Passive
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a manipulation results in type confusion. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
2k sid_meiers_civilization_vi 1.0.12.68

References & Advisories (6)

https://vuldb.com/cve/CVE-2026-116370
Third Party Advisory VDB Entry
https://vuldb.com/submit/1013119
Third Party Advisory VDB Entry
https://vuldb.com/vuln/426334
Third Party Advisory VDB Entry
https://vuldb.com/vuln/426334/cti
Third Party Advisory VDB Entry

Bug Bounty Relevance

54 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

2.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.40%
Raw Score 0.003980
Percentile 34.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00398
2026-10-28
0.00347

Intelligence Sources

mitre ref →
nvd ref →

External Links