PT-2026-47191 · Usc Ilab · Cereal

Trebledj · Published 2026-06-07 · Updated 2026-06-07 · CVE-2026-11463

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unknown function of the component Shared Pointer Handler. Executing a manipulation can lead to type confusion. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

Exploit

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2026-11463

Affected Products

Cereal

References · 8

• 🔥 https://gist.github.com/TrebledJ/0223c1fa3c3fd64e2c7047b8a4385ec0 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11463 · Security Note
• https://github.com/USCiLab/cereal/issues/870 · Note
• https://vuldb.com/submit/814456 · Note
• https://vuldb.com/vuln/369083 · Note
• https://vuldb.com/cve/CVE-2026-11463 · Note
• https://github.com/USCiLab/cereal · Note
• https://vuldb.com/vuln/369083/cti · Note