PT-2026-47187 · Boost · Boost Serialization

Trebledj · CVE-2026-11460 · Published 2026-06-07 · Updated 2026-06-07

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Boost Serialization versions prior to 1.92

Description An issue exists in an unknown function that causes improper validation of the specified type of input. This flaw allows a remote attacker to achieve remote code execution, which is the ability to execute arbitrary commands on a target machine over a network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

CWE-1287

Related Identifiers

CVE-2026-11460

Affected Products

Boost Serialization

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/11xxx/CVE-2026-11460.json · Exploit
• 🔥 https://gist.github.com/TrebledJ/b7c872f869b5ed7cbd936f71f16c7d75 · Exploit
• https://osv.dev/vulnerability/CVE-2026-11460 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-11460 · Security Note
• https://github.com/boostorg/serialization/issues/331 · Note
• https://t.me/cveNotify/166418 · Telegram Post
• https://t.me/CVEtracker/56095 · Telegram Post
• https://vuldb.com/submit/814455 · Note
• https://twitter.com/VulmonFeeds/status/2063721551216648703 · Twitter Post
• https://vuldb.com/cve/CVE-2026-11460 · Note
• https://vuldb.com/vuln/369080 · Note
• https://vuldb.com/vuln/369080/cti · Note