CVE-2026-11463
USCiLab Cereal Shared Pointer type confusion
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
15th
A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unknown function of the component Shared Pointer Handler. Executing a manipulation can lead to type confusion. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
| CWE | CWE-843 |
| Vendor | uscilab |
| Product | cereal |
| Published | Jun 7, 2026 |
| Last Updated | Jun 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for uscilab cereal
Be the first to know when new high vulnerabilities affecting uscilab cereal are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
USCiLab / Cereal
1.3.0 1.3.1 1.3.2
References
vuldb.com: https://vuldb.com/vuln/369083 vuldb.com: https://vuldb.com/vuln/369083/cti vuldb.com: https://vuldb.com/cve/CVE-2026-11463 vuldb.com: https://vuldb.com/submit/814456 github.com: https://github.com/USCiLab/cereal/issues/870 gist.github.com: https://gist.github.com/TrebledJ/0223c1fa3c3fd64e2c7047b8a4385ec0 github.com: https://github.com/USCiLab/cereal/
Credits
🔍 trebledj (VulDB User) VulDB CNA Team