Live › vulnerability › CVE-2026-116370
Go to dashboardSid Meier's Civilization IV 1.0.12.68 has a type confusion flaw in the loadstring function of its Lua sandbox, reported as CVE-2026-116370. The sources say a public exploit exists and the attack may be launched remotely, but they do not say what an attacker gains beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 17:31 UTC. All times on this page are UTC.
No product ranges from the sources yet.
1.0.12.68 (the version the report names)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security flaw has been discovered in 2K Games Sid Meier's Civilization IV 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a manipulation results in type confusion. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.
This page as .md · .json · in your agent: get_signal("CVE-2026-116370")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.