CVE-2023-26266EPSS p32.8%

CVE-2023-26266CVE-2023-26266

afl\+\+_project / afl\+\+

Description

In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution.

Scoring

CVSS 7.3 ()
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS0.40% probability of exploitation · percentile 32.8% · 2026-08-03T12:00:16Z
Last modified2026-06-17
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.