CVE-2026-91091

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf_node_list_insert_child of the file scenegraph/base_scenegraph.c of the component Node Insertion. Such manipulation leads to memory corruption. The attack can be launched remotely. The exploit is publicly available and might be used. Upgrading to version abi-16.23 is sufficient to resolve this issue. The name of the patch is 49dee5cad329cfed310c1682703df7daa47df31a. It is suggested to upgrade the affected component.

• CWE-119

• https://github.com/gpac/gpac/
• https://github.com/gpac/gpac/commit/49dee5cad329cfed310c1682703df7daa47df31a
• https://github.com/gpac/gpac/issues/3811
• https://github.com/gpac/gpac/releases/tag/abi-16.23
• https://github.com/user-attachments/files/30400179/poc_18_nstatx.zip
• https://vuldb.com/cve/CVE-2026-91091
• https://vuldb.com/submit/919761
• https://vuldb.com/vuln/403653
• https://vuldb.com/vuln/403653/cti

Published

Sep 15, 2026

Last Modified

Sep 15, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-91086A security vulnerability has been detected in GPAC up to f12…6.3
• CVE-2026-91087A flaw has been found in GPAC up to f1219cde. This vulnerabi…7.3
• CVE-2026-91088A vulnerability has been found in GPAC up to f1219cde. This …4.8
• CVE-2026-91089A vulnerability was found in GPAC up to f1219cde. Impacted i…6.3
• CVE-2026-9109The GPTranslate – Multilingual AI Translation for WordPress:…7.2
• CVE-2026-91090A vulnerability was determined in GPAC up to f1219cde. The a…3.9
• CVE-2026-91092The wpForo Forum plugin for WordPress is vulnerable to autho…4.3
• CVE-2026-91093A potential security vulnerability has been identified in HP…8.5
• CVE-2026-91095In proxygen from v2024.10.28.00 until v2026.09.28.00, the HT…5.3
• CVE-2026-91096In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTra…7.5
• CVE-2026-91097HP has identified and remediated multiple externally reporte…9.8
• CVE-2026-91098HP has identified and remediated multiple externally reporte…9.8