← volver
CVE-2026-1990

oatpp Type.hpp ObjectWrapper null pointer dereference

CVSS 4.8 MEDIUMEPSS 0.2%CWE-404CWE-476
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.8EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
06 feb 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A security vulnerability has been detected in oatpp up to 1.3.1. This impacts the function oatpp::data::type::ObjectWrapper::ObjectWrapper of the file src/oatpp/data/type/Type.hpp. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
n/a · oatpp

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →