CVE-2026-11463

HIGH

A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unknown function of the component Shared Pointer Handler. Executing a manipulation can lead to type confusion. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

CVSS v3.1 Score

7.3
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW
Published: 6/7/2026Modified: 6/8/2026

Related Intelligence (2)

CRITICALZero Day

Patch Tuesday - June 2026

Microsoft is publishing 200 vulnerabilities on June 2026 Patch Tuesday . Microsoft is not aware of exploitation in the wild for any of these vulnerabilities, and is aware of public disclosure for three. This is similar to last month’s Patch Tuesday, however several of last month’s vulnerabilities ended up on CISA KEV in the days following their publication. So far this month, Microsoft has provide

CVE-2026-33825CVE-2026-45585
Rapid7
HIGHVulnerability

NVD HIGH: CVE-2026-11463 — A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unk...

A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unknown function of the component Shared Pointer Handler. Executing a manipulation can lead to type confusion. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

CVE-2026-11463
NIST NVD

References (7)

https://gist.github.com/TrebledJ/0223c1fa3c3fd64e2c7047b8a4385ec0https://github.com/USCiLab/cereal/https://github.com/USCiLab/cereal/issues/870https://vuldb.com/cve/CVE-2026-11463https://vuldb.com/submit/814456https://vuldb.com/vuln/369083https://vuldb.com/vuln/369083/cti