CVE-2026-1979

A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This patch is called e50f15c1c6e131fa7934355eb02b8173b13df415. It is advisable to implement a patch to correct this issue.

• CWE-119
• CWE-416

• https://github.com/mruby/mruby/Product
• https://github.com/mruby/mruby/issues/6701Exploit, Issue Tracking
• https://github.com/mruby/mruby/issues/6701#issue-3802609843Exploit, Issue Tracking
• https://github.com/sysfce2/mruby/commit/e50f15c1c6e131fa7934355eb02b8173b13df415Patch
• https://vuldb.com/?ctiid.344501Permissions Required, VDB Entry
• https://vuldb.com/?id.344501Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.743377Third Party Advisory, VDB Entry

Published

Feb 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19784A flaw has been found in francoisjacquet RosarioSIS up to 12…4.3
• CVE-2026-19785A vulnerability has been found in francoisjacquet RosarioSIS…6.3
• CVE-2026-19786A vulnerability was found in francoisjacquet RosarioSIS up t…5.3
• CVE-2026-19787A vulnerability was determined in SourceCodester Air Cargo M…4.7
• CVE-2026-19788A vulnerability was found in Tenda AC1206 15.03.06.23_multi_…8.8
• CVE-2026-19789A vulnerability was determined in Tenda AC1206 15.03.06.23_m…8.8
• CVE-2026-19790A vulnerability was identified in Tenda G0 up to 20260625. T…8.8
• CVE-2026-19791A weakness has been identified in Tenda G0 up to 20260625. T…8.8
• CVE-2026-19792A security flaw has been discovered in Tenda G0 up to 202606…8.8
• CVE-2026-19794The WP-Stats plugin for WordPress is vulnerable to Stored Cr…7.2
• CVE-2026-19795Qiskit could allow a local attacker to cause a denial of ser…6.2
• CVE-2026-19796The Listdom: AI-powered Business Directory with Classifieds …7.2