PT-2026-4862 · Zlib+1 · Zlib+1

Titan Team · Publicado 2026-01-27 · Atualizado 2026-02-17 · CVE-2026-24793

Positive Technologies (AI Summary)

CVSS v4.0

10

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/V:C/RE:L/U:Red

Name of the Vulnerable Software and Affected Versions azerothcore-wotlk versions through 4.0.0

Description The software contains an out-of-bounds write issue, specifically a buffer copy without checking the size of the input, often referred to as a classic buffer overflow. This issue is present in the deps/zlib modules, specifically within the inflate.C program files. The issue could lead to remote code execution without user interaction.

Recommendations Versions prior to 4.0.1 are affected.

Exploit

Correção

RCE

Memory Corruption

Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-120

Identificadores relacionados

AZL-75821

AZL-75836

CVE-2026-24793

Produtos afetados

Azerothcore-Wotlk

Zlib

Referências · 9

• 🔥 https://github.com/azerothcore/azerothcore-wotlk/pull/21599 · Exploit
• https://osv.dev/vulnerability/AZL-75836 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-24793 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-24793 · Aviso do Fabricante
• https://osv.dev/vulnerability/AZL-75821 · Aviso do Fabricante
• https://t.me/cveNotify/149962 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2016073222127530108 · Publicação no Twitter
• https://t.me/cveNotify/152235 · Publicação no Telegram
• https://twitter.com/0dayPublishing/status/2016069035016765563 · Publicação no Twitter