TI-2026-80231 Aliases CVE-2026-116098 GHSA-623g-5673-24x6

Deserialization flaw in SteelRaven7 Ravenfield custom map handling

LOW 24CWE-20Published 2026-10-25 · Updated 2026-10-29

Key facts

Attack vector: Network
Privileges required: None
User interaction: Passive
Attack complexity: Low
Attack requirements: None
Impact type: Code execution
Confidentiality · integrity · availability: Low · Low · Low
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-502.

Summary

SteelRaven7 Ravenfield from 25407073 is affected by a deserialization flaw in the cacheCoverPoints function of the RFL Custom Map Handler component. The component deserializes untrusted map data without adequate validation (CWE-502). A remote attacker without privileges can trigger it if a user interacts with crafted content. An exploit link is listed in the references.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible. The patch is named EA39 Security Patch. Applying a patch is the recommended action to fix this issue.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00254 17th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
SteelRaven7	Ravenfield	25407073	—	No fix listed	CNA

Ravenfield VendorSteelRaven7 Affected 25407073 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:steelraven7:ravenfield::::::steam::*	before 2026-10-25	Vulnerable	SteelRaven7

cpe:2.3:a:steelraven7:ravenfield:*:*:*:*:*:steam:*:* Versions before 2026-10-25 Vulnerable ·SteelRaven7

Remediation

Applying the EA39 Security Patch is the recommended action. The sources list no fixed version for Ravenfield.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Timeline

2026-10-25 Threatist record created from CVE-2026-116098
2026-10-27 Alias added: GHSA-623g-5673-24x6
2026-10-28 CVSS score added · NVD
2026-10-29 CISA SSVC decision points changed
2026-10-29 CVSS score changed · NVD

References

Exploit 1

https://drbloop.dev/blog/9-year-old-one-click-remote-code-execution-in-ravenfield

Patch 1

https://steamcommunity.com/app/636480/events/590690402783479125

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences