SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-14790

LOW · CVSS 3.3 EPSS 0.11% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-06 · Last synced 2026-08-04

CyberRota Analysis

AI-Generated

A vulnerability in the Media File Handler of GPAC 26.02.0 allows for a null pointer dereference through manipulation of the nhmldump_send_frame function, requiring local access to exploit. While the severity is rated low, the published exploit indicates that affected users should prioritize applying the provided patch (bd1d94e70e3bef364c07c5a1d94eca5c9f56e160) to mitigate potential risks. Organizations utilizing F5 products should address this issue to maintain system stability and security.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-14790
Severity
LOW
CVSS
3.3
EPSS
0.11%
F5

Original NVD Description

A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.c of the component Media File Handler. Executing a manipulation can lead to null pointer dereference. The attack requires local access. The exploit has been published and may be used. This patch is called bd1d94e70e3bef364c07c5a1d94eca5c9f56e160. A patch should be applied to remediate this issue. The project explains: "I would consider most of these more as bugs than vulns but anyway they're good to fix".