AUGUST 23, 2026
Live Feed
Back to database
Case File

CVE-2026-14757

MEDIUM · CVSS 5.3 EPSS 0.18% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-05 · Last synced 2026-08-04

CyberRota Analysis

AI-Generated

A local integer overflow vulnerability exists in the core_anal_bytes function of radareorg radare2 versions up to 6.1.6, potentially allowing attackers to manipulate memory and execute arbitrary code. Organizations using affected versions should prioritize applying the available patch to mitigate the risk of exploitation, as the vulnerability has been publicly disclosed.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-14757
Severity
MEDIUM
CVSS
5.3
EPSS
0.18%

Original NVD Description

A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core_anal_bytes of the file libr/core/cmd_anal.inc. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. It is suggested to install a patch to address this issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)