SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-79590

MEDIUM · CVSS 6.5 EPSS 0.15% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-10 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

A NULL pointer dereference vulnerability in the Prism parser component of mruby 4.0.0 allows attackers to exploit specially crafted Ruby source files, leading to undefined behavior and potential application crashes. Organizations utilizing mruby 4.0.0 should prioritize this issue to mitigate risks associated with application stability and security.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-79590
Severity
MEDIUM
CVSS
6.5
EPSS
0.15%

Original NVD Description

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash.