LOW 2.1 NVD
CVE-2026-116230
A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the component Workshop Scen
A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the component Workshop Scenario Loader. Such manipulation leads to deserialization. The attack may be performed from remote. Upgrading to version 1.24.0.4 is sufficient to fix this issue. It is recommended to upgrade the affected component.
References
- https://drbloop.dev/blog/one-click-rce-plauge-inc
- https://store.steampowered.com/news/app/246620/view/708909893000628135
- https://vuldb.com/cve/CVE-2026-116230
- https://vuldb.com/submit/1007147
- https://vuldb.com/vuln/426279
This low severity vulnerability with a CVSS score of 2.1 was published on 2026-10-26 via NVD.
vulnfeed aggregates 18201 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.