CVE-2026-40469

Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.

• CWE-190

• https://cert.pl/en/posts/2026/07/CVE-2026-40467Third Party Advisory
• https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=ae1b2d508f46913269a9e62aceda3636afe8147bPatch

Published

Jul 13, 2026

Last Modified

Jul 14, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40463WaveSuite is affected by an insufficient role-based access c…7.6
• CVE-2026-40464NSP is vulnerable to a stored XSS due to insufficient valida…5.4
• CVE-2026-40465NSP is vulnerable to an open redirect due to insufficient se…5.3
• CVE-2026-40466Improper Input Validation, Improper Control of Generation of…8.8
• CVE-2026-40467Use After Free vulnerability has been found in "io.c" progra…7.5
• CVE-2026-40468Integer overflow vulnerability has been found in "builtin.c"…9.1
• CVE-2026-40470A critical XSS vulnerability affected hackage-server and hac…9.9
• CVE-2026-40471hackage-server lacked Cross-Site Request Forgery (CSRF) prot…9.6
• CVE-2026-40472In hackage-server, user-controlled metadata from .cabal file…9.9
• CVE-2026-40473The camel-mina component's MinaConverter.toObjectInput(IoBuf…8.8
• CVE-2026-40474wger is a free, open-source workout and fitness manager. In …7.6
• CVE-2026-40476graphql-go is a Go implementation of GraphQL. In versions 15…7.5