Read the docs
TI-2026-80232 Aliases CVE-2026-116099GHSA-2424-3jrj-v5gr

Out-of-bounds write in SCP Containment Breach Multiplayer Skynet++

Priority MEDIUM 63CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Fusion Creators Studio SCP Containment Breach Multiplayer from 1.295 before 1.3R is affected. A flaw in the BlitzBanks function of the Skynet++ Virtual Machine component lets a manipulation cause an out-of-bounds write (CWE-787). A remote attacker with no privileges can trigger it with user interaction. A public exploit is linked in the references.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manipulation can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 1.3R is capable of addressing this issue. It is recommended to upgrade the affected component.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00378 32nd percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD and the CNA
Fix Fixed SCP Containment Breach Multiplayer (Fusion Creators Studio): 1.3R

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Fusion Creators StudioSCP Containment Breach Multiplayer1.2951.3RPatch availableCNA
  • SCP Containment Breach Multiplayer VendorFusion Creators Studio Affected 1.295 Fixed in 1.3R Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:fcs-ex:scp\:containment_breach_multiplayer:*:*:*:*:*:steam:*:*containment_breach_multiplayerVulnerableFcs-ex
  • cpe:2.3:a:fcs-ex:scp\:containment_breach_multiplayer:*:*:*:*:*:steam:*:* Versions containment_breach_multiplayer Vulnerable ·Fcs-ex

Remediation

Upgrade Fusion Creators Studio SCP Containment Breach Multiplayer to version 1.3R. The vendor recommends upgrading the affected component.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA SCP Containment Breach Multiplayer (Fusion Creators Studio) Fixed in 1.3R

Timeline

  1. 2026-10-25 Threatist record created from CVE-2026-116099
  2. 2026-10-26 CISA SSVC decision points changed
  3. 2026-10-26 Priority changed: LOW → MEDIUM
  4. 2026-10-27 Alias added: GHSA-2424-3jrj-v5gr
  5. 2026-10-28 CVSS score added · NVD
  6. 2026-10-29 CVSS score changed · NVD

References

Exploit 2

Patch 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences