CVE-2026-40468

Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.

• CWE-190

• https://cert.pl/en/posts/2026/07/CVE-2026-40467Third Party Advisory
• https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=062f2f2581b991362c046f7f2e238ffa34e6f8c7Patch

Published

Jul 13, 2026

Last Modified

Jul 14, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4046The iconv() function in the GNU C Library versions 2.43 and …7.5
• CVE-2026-40460When NGINX Plus or NGINX Open Source are configured to use t…6.9
• CVE-2026-40461Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POS…7.5
• CVE-2026-40462Incorrect permission assignment vulnerabilities exist in iCo…7.1
• CVE-2026-40466Improper Input Validation, Improper Control of Generation of…8.8
• CVE-2026-40467Use After Free vulnerability has been found in "io.c" progra…7.5
• CVE-2026-40469Integer overflow vulnerability has been found in "builtin.c"…9.1
• CVE-2026-40470A critical XSS vulnerability affected hackage-server and hac…9.9
• CVE-2026-40471hackage-server lacked Cross-Site Request Forgery (CSRF) prot…9.6
• CVE-2026-40472In hackage-server, user-controlled metadata from .cabal file…9.9
• CVE-2026-40473The camel-mina component's MinaConverter.toObjectInput(IoBuf…8.8
• CVE-2026-40474wger is a free, open-source workout and fitness manager. In …7.6