CVE-2026-116098

CRITICAL 9.8CVE-2026-116098 · Published 26/10/2026 · updated 28/10/2026

In short

CVE-2026-116098 is a CRITICAL (CVSS 9.8) vulnerability affecting ravenfield (steelraven7).
Chance of exploitation in the next 30 days (EPSS): 0.25%, higher than 17.0% of all vulnerabilities.
Fix: update to 2026-10-25 or later.

Package	Affected versions	Patched versions
ravenfield steelraven7	`< 2026-10-25`	`2026-10-25`

Description

A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible. The patch is named EA39 Security Patch. Applying a patch is the recommended action to fix this issue.

References

drbloop.dev/blog/9-year-old-one-click-remote-code-execution-in-ravenfield · Exploit
steamcommunity.com/app/636480/events/590690402783479125 · Product
vuldb.com/cve/CVE-2026-116098 · Third Party Advisory
vuldb.com/submit/1001274 · Third Party Advisory
vuldb.com/vuln/426166 · Third Party Advisory
vuldb.com/vuln/426166/cti · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free