CVE-2026-116099
Fusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write
Fusion Creators Studio SCP Containment Breach Multiplayer
CVSS
5.3MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manipulation can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 1.3R is capable of addressing this issue. It is recommended to upgrade the affected component.
Text from CVE List
Affected versions 2
- SCP Containment Breach Multiplayeraffected: 1.295CVE List
- SCP Containment Breach Multiplayerunaffected: 1.3RCVE List
References 8
- steamdb.info/patchnotes/25701366/Fixvia CVE List
- vuldb.com/cve/CVE-2026-116099Advisoryvia CVE List
- vuldb.com/submit/1001276Advisoryvia CVE List
- github.com/drbloop2000/SCP-CBM-RCE/tree/mainExploitvia CVE List
- vuldb.com/vuln/426167Referencevia CVE List
- vuldb.com/vuln/426167/ctiReferencevia CVE List
- drbloop.dev/blog/one-click-remote-code-execution-in-scp-containment-breach-mutiplayerReferencevia CVE List
- store.steampowered.com/news/app/1782380/view/670629296167978253Referencevia CVE List