All vulnerabilities
CVE-2026-116230

Ndemic Creations Plague Inc Evolved Workshop Scenario Loader deserialization

Ndemic Creations Plague Inc Evolved
Open in ThreatlineRecord JSON
CVSS
5.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published26 Oct 2026Updated 26 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the component Workshop Scenario Loader. Such manipulation leads to deserialization. The attack may be performed from remote. Upgrading to version 1.24.0.4 is sufficient to fix this issue. It is recommended to upgrade the affected component.

Text from CVE List

Affected versions 5

  • Plague Inc Evolvedaffected: 1.24.0.0CVE List
  • Plague Inc Evolvedaffected: 1.24.0.1CVE List
  • Plague Inc Evolvedaffected: 1.24.0.2CVE List
  • Plague Inc Evolvedaffected: 1.24.0.3CVE List
  • Plague Inc Evolvedunaffected: 1.24.0.4CVE List

References 6