PT-2026-4895 · Turanszkij · Wickedengine

Titan Team · CVE-2026-24820 · Published 2026-01-27 · Updated 2026-01-27

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/S:N/AU:Y/R:U/V:C/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions turanszkij WickedEngine versions prior to 0.71.705

Description An out-of-bounds read issue exists in turanszkij WickedEngine, specifically within the LUA modules and associated with the ldebug.C program file.

Recommendations Update turanszkij WickedEngine to version 0.71.705 or later.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-24820

Affected Products

Wickedengine

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24820.json · Exploit
• https://github.com/turanszkij/WickedEngine/pull/1054 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-24820 · Security Note
• https://osv.dev/vulnerability/CVE-2026-24820 · Vendor Advisory
• https://github.com/turanszkij/WickedEngine · Note
• https://twitter.com/CVEnew/status/2016081234032542042 · Twitter Post
• https://t.me/CVEtracker/43046 · Telegram Post