PT-2026-4862 · Zlib+1 · Zlib+1

Titan Team · Published 2026-01-27 · Updated 2026-02-17 · CVE-2026-24793

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/V:C/RE:L/U:Red

Name of the Vulnerable Software and Affected Versions azerothcore-wotlk versions through 4.0.0

Description The software contains an out-of-bounds write issue, specifically a buffer copy without checking the size of the input, often referred to as a classic buffer overflow. This issue is present in the deps/zlib modules, specifically within the inflate.C program files. The issue could lead to remote code execution without user interaction.

Recommendations Versions prior to 4.0.1 are affected.

Exploit

Fix

RCE

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-120

Related Identifiers

AZL-75821

AZL-75836

CVE-2026-24793

Affected Products

Azerothcore-Wotlk

Zlib

References · 9

• 🔥 https://github.com/azerothcore/azerothcore-wotlk/pull/21599 · Exploit
• https://osv.dev/vulnerability/AZL-75836 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24793 · Security Note
• https://osv.dev/vulnerability/CVE-2026-24793 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-75821 · Vendor Advisory
• https://t.me/cveNotify/149962 · Telegram Post
• https://twitter.com/CVEnew/status/2016073222127530108 · Twitter Post
• https://t.me/cveNotify/152235 · Telegram Post
• https://twitter.com/0dayPublishing/status/2016069035016765563 · Twitter Post