VULNERABILITY INTELLIGENCE
CVE-2026-56137
CVSS score8.4 HIGH
EPSS probability1.09%
CISA KEVNot currently listed
Published2026-06-30
Last modified2026-06-30
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability. If a user loads a specially crafted save-file, arbitrary OS command may be executed.
Weakness classification
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')