CVE-2026-90715

A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravity_json.c of the component udp json-parser. Such manipulation leads to integer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.8 mitigates this issue. The name of the patch is 9b337c3eae5833c3956bed1fc01c21c14fd443f2. Upgrading the affected component is recommended.

• CWE-189
• CWE-190

• https://github.com/marcobambini/gravity/
• https://github.com/marcobambini/gravity/issues/447
• https://github.com/marcobambini/gravity/pull/451
• https://github.com/marcobambini/gravity/releases/tag/0.9.8
• https://github.com/sthagen/marcobambini-gravity/commit/9b337c3eae5833c3956bed1fc01c21c14fd443f2
• https://vuldb.com/cve/CVE-2026-90715
• https://vuldb.com/submit/919189
• https://vuldb.com/vuln/403269
• https://vuldb.com/vuln/403269/cti

Published

Sep 14, 2026

Last Modified

Sep 14, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9071IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSph…7.5
• CVE-2026-90710A vulnerability was determined in taisan tarzan-cms 1.0.0. T…7.3
• CVE-2026-90711proxy-addr is a Node.js module that determines a request's c…9.1
• CVE-2026-90712A vulnerability was identified in Gitlawb openclaude up to 0…4.3
• CVE-2026-90713A security flaw has been discovered in vllm-project vLLM up …3.3
• CVE-2026-90714A weakness has been identified in marcobambini Gravity up to…6.3
• CVE-2026-90716A vulnerability was detected in marcobambini Gravity up to 0…5.5
• CVE-2026-9072IBM WebSphere Application Server and IBM WebSphere Applicati…9.8
• CVE-2026-9073A flaw was found in foreman-mcp-server. This component utili…6.2
• CVE-2026-9074IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 throu…9.8
• CVE-2026-9076Issue summary: When CMS password-based decryption (RFC 3211 …7.5
• CVE-2026-90767Froxlor before 2.3.12 fails to properly validate multi-line …6.5