SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-90715

HIGH · CVSS 7.3 Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-14 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

A vulnerability in the udp json-parser component of marcobambini Gravity versions up to 0.9.7 allows for remote exploitation via integer overflow in the src/utils/gravity_json.c file. This could lead to potential denial-of-service conditions or arbitrary code execution. Organizations using affected versions should prioritize upgrading to version 0.9.8 to mitigate the risk associated with this high-severity vulnerability.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-90715
Severity
HIGH
CVSS
7.3
EPSS
N/A

Original NVD Description

A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravity_json.c of the component udp json-parser. Such manipulation leads to integer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.8 mitigates this issue. The name of the patch is 9b337c3eae5833c3956bed1fc01c21c14fd443f2. Upgrading the affected component is recommended.