CVE-2026-14761

A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_ndup/r_str_append of the file libr/util/str.c. The manipulation leads to integer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is a20a56917ae85d732e683f8d9078bdcfee92446c. Applying a patch is the recommended action to fix this issue.

• CWE-189
• CWE-190

• https://github.com/radareorg/radare2/Product
• https://github.com/radareorg/radare2/commit/a20a56917ae85d732e683f8d9078bdcfee92446cPatch
• https://github.com/radareorg/radare2/issues/26045Exploit, Issue Tracking
• https://vuldb.com/cve/CVE-2026-14761Third Party Advisory, VDB Entry
• https://vuldb.com/submit/850385Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/376350Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/376350/ctiPermissions Required, VDB Entry

Published

Jul 5, 2026

Last Modified

Jul 6, 2026

Status

Analyzed

• CVE-2026-14756A vulnerability was found in code-projects Hotel and Tourism…7.3
• CVE-2026-14757A vulnerability was determined in radareorg radare2 up to 6.…5.3
• CVE-2026-14758A vulnerability was identified in radareorg radare2 up to 6.…5.5
• CVE-2026-14759A security flaw has been discovered in radareorg radare2 up …7.8
• CVE-2026-1476An out-of-band SQL injection vulnerability (OOB SQLi) has be…7.5
• CVE-2026-14760A weakness has been identified in radareorg radare2 up to 6.…7.8
• CVE-2026-14762A vulnerability was detected in code-projects Hotel and Tour…7.3
• CVE-2026-14763A flaw has been found in code-projects Hotel and Tourism Res…7.3
• CVE-2026-14764A vulnerability has been found in code-projects Hotel and To…7.3
• CVE-2026-14766A vulnerability was identified in CodeAstro Apartment Visito…6.3
• CVE-2026-14767A security flaw has been discovered in CodeAstro Ecommerce W…6.3
• CVE-2026-14768A weakness has been identified in code-projects Real State S…7.3