CVE-2026-90831

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

• CWE-119

• https://sourceware.org/bugzilla/attachment.cgi?id=16886Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=34454Third Party Advisory
• https://vuldb.com/cve/CVE-2026-90831Third Party Advisory
• https://vuldb.com/submit/925230Third Party Advisory
• https://vuldb.com/vuln/403333Third Party Advisory
• https://vuldb.com/vuln/403333/ctiPermissions Required
• https://www.gnu.org/Product

Published

Sep 14, 2026

Last Modified

Sep 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90826A vulnerability was determined in GPAC 26.07.0. Affected by …2.8
• CVE-2026-90827A vulnerability was identified in GPAC 26.07.0. This affects…3.3
• CVE-2026-90828A security flaw has been discovered in GNU Binutils 2.47. Th…5.3
• CVE-2026-90829A weakness has been identified in GNU Binutils 2.47. This is…5.3
• CVE-2026-9083A flaw was found in Keycloak. A realm administrator with the…4.9
• CVE-2026-90830A security vulnerability has been detected in GNU Binutils 2…5.3
• CVE-2026-90835A flaw has been found in michaelliao itranswarp up to 2.19. …3.5
• CVE-2026-9084MISP’s OIDC authentication plugin allowed automatic linking …6
• CVE-2026-90840A vulnerability was identified in PHPGurukul Blood Donor Man…7.3
• CVE-2026-90841A security flaw has been discovered in PHPGurukul Blood Dono…7.3
• CVE-2026-90842A weakness has been identified in PHPGurukul Blood Donor Man…3.7
• CVE-2026-90843A security vulnerability has been detected in SabyasachiRana…8.3