CVE-2026-116230

A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the component Workshop Scenario Loader. Such manipulation leads to deserialization. The attack may be performed from remote. Upgrading to version 1.24.0.4 is sufficient to fix this issue. It is recommended to upgrade the affected component.

CVSS 4.0

2.1CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

6.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWEs

CWE-20, CWE-502

Published

2026-10-26

Modified

2026-10-26

Record from

the NVD, synced 2026-10-26

References

• https://drbloop.dev/blog/one-click-rce-plauge-inc
• https://store.steampowered.com/news/app/246620/view/708909893000628135
• https://vuldb.com/cve/CVE-2026-116230
• https://vuldb.com/submit/1007147
• https://vuldb.com/vuln/426279

Check your stackJSON