CVE-2026-90827

A vulnerability was identified in GPAC 26.07.0. This affects the function gf_node_deactivate_ex of the file scenegraph/base_scenegraph.c of the component MP4Box. Such manipulation leads to use after free. The attack must be carried out locally. The exploit is publicly available and might be used. Upgrading to version abi-16.23 is able to mitigate this issue. The name of the patch is 49dee5cad329cfed310c1682703df7daa47df31a. You should upgrade the affected component.

• CWE-119
• CWE-416

• https://github.com/gpac/gpac/
• https://github.com/gpac/gpac/commit/49dee5cad329cfed310c1682703df7daa47df31a
• https://github.com/gpac/gpac/issues/3813
• https://github.com/gpac/gpac/releases/tag/abi-16.23
• https://github.com/user-attachments/files/30400423/poc_20_nstatx.zip
• https://vuldb.com/cve/CVE-2026-90827
• https://vuldb.com/submit/914952
• https://vuldb.com/vuln/403329
• https://vuldb.com/vuln/403329/cti

Published

Sep 14, 2026

Last Modified

Sep 15, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90819A weakness has been identified in a2aproject a2a-java 1.2.0.…7.3
• CVE-2026-9082Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2026-90820A security vulnerability has been detected in a2aproject a2a…4.3
• CVE-2026-90824A vulnerability has been found in GPAC 26.07.0. Affected is …3.3
• CVE-2026-90825A vulnerability was found in GPAC 26.07.0. Affected by this …3.3
• CVE-2026-90826A vulnerability was determined in GPAC 26.07.0. Affected by …2.8
• CVE-2026-90828A security flaw has been discovered in GNU Binutils 2.47. Th…5.3
• CVE-2026-90829A weakness has been identified in GNU Binutils 2.47. This is…5.3
• CVE-2026-9083A flaw was found in Keycloak. A realm administrator with the…4.9
• CVE-2026-90830A security vulnerability has been detected in GNU Binutils 2…5.3
• CVE-2026-90831A vulnerability was detected in GNU Binutils 2.47. The affec…5.3
• CVE-2026-90835A flaw has been found in michaelliao itranswarp up to 2.19. …3.5