CVE-2026-116098
SteelRaven7 Ravenfield RFL Custom Map Handler/RFLD Custom Map cacheCoverPoints deserialization
SteelRaven7 Ravenfield
CVSS
5.3MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible. The patch is named EA39 Security Patch. Applying a patch is the recommended action to fix this issue.
Text from CVE List
Affected versions 1
- Ravenfieldaffected: 25407073CVE List
References 6
- steamcommunity.com/app/636480/events/590690402783479125Fixvia CVE List
- vuldb.com/cve/CVE-2026-116098Advisoryvia CVE List
- vuldb.com/submit/1001274Advisoryvia CVE List
- vuldb.com/vuln/426166Referencevia CVE List
- vuldb.com/vuln/426166/ctiReferencevia CVE List
- drbloop.dev/blog/9-year-old-one-click-remote-code-execution-in-ravenfieldReferencevia CVE List