CVE-2026-24793

CRITICAL 9.8CVE-2026-24793 · Published 27/01/2026 · updated 17/06/2026

In short

CVE-2026-24793 is a CRITICAL (CVSS 9.8) vulnerability affecting azerothcore (azerothcore).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 26.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
azerothcore azerothcore	`≤ 4.0.0`	No fix yet

Description

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in azerothcore azerothcore-wotlk (deps/zlib modules). This vulnerability is associated with program files inflate.C. This issue affects azerothcore-wotlk: through v4.0.0.

References

azerothcore/azerothcore-wotlk#21599 · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free