CVE-2026-1998

A flaw has been found in micropython up to 1.27.0. This vulnerability affects the function mp_import_all of the file py/runtime.c. This manipulation causes memory corruption. The attack needs to be launched locally. The exploit has been published and may be used. Patch name: 570744d06c5ba9dba59b4c3f432ca4f0abd396b6. It is suggested to install a patch to address this issue.

• CWE-119
• CWE-787

• https://github.com/dpgeorge/micropython/commit/570744d06c5ba9dba59b4c3f432ca4f0abd396b6Patch
• https://github.com/micropython/micropython/Product
• https://github.com/micropython/micropython/issues/18639Exploit, Issue Tracking
• https://github.com/micropython/micropython/issues/18639#issue-3780651410Exploit, Issue Tracking
• https://github.com/micropython/micropython/pull/18671Exploit, Issue Tracking
• https://vuldb.com/?ctiid.344546Permissions Required, VDB Entry
• https://vuldb.com/?id.344546Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.743396Exploit, Third Party Advisory, VDB Entry

Published

Feb 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19974A security flaw has been discovered in treefrogframework tre…5.6
• CVE-2026-19975A weakness has been identified in Azuriom CMS up to 1.2.12. …3.1
• CVE-2026-19976A security vulnerability has been detected in COMFAST CF-N1-…6.6
• CVE-2026-19977A vulnerability was detected in EFM ipTIME A3004T 14.19.0. T…10
• CVE-2026-19978A flaw has been found in jiantao88 android-mcp-server up to …5.3
• CVE-2026-19979A vulnerability was identified in GL.iNet A1300, AX1800, AXT…8.3
• CVE-2026-19980A security flaw has been discovered in GL.iNet A1300, AX1800…7.4
• CVE-2026-19981A weakness has been identified in GL.iNet A1300, AX1800, AXT…7.4
• CVE-2026-19982A security vulnerability has been detected in GL.iNet BE9300…7.4
• CVE-2026-19983A vulnerability was detected in GL.iNet A1300, AX1800, AXT18…8.3
• CVE-2026-19984A flaw has been found in jkawamoto mcp-florence2 up to 0.3.1…6.3
• CVE-2026-19985The Relevanssi – A Better Search plugin for WordPress is vul…6.1