High severity · published Oct 25, 2026
CVE-2026-116099
Fusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write
New
8.8
CVSS
0.3%
EPSS
No
On KEV
Description
A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Machine. Executing a manipulation can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 1.3R is capable of addressing this issue. It is recommended to upgrade the affected component.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
SCP Containment Breach Multiplayer · Fusion Creators Studio
1.295 · source: vendor
SB
Scp:containment Breach Multiplayer · Fcs-ex
through 1.295 · source: NVD
Affected product
SC
SCP Containment Breach Multiplayer
Fusion Creators Studio
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-116099
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-116099
drbloop.dev
https://drbloop.dev/blog/one-click-remote-code-execution-in-scp-containment-breach-mutiplayer
github.com
https://github.com/drbloop2000/SCP-CBM-RCE/tree/main
steamdb.info
https://steamdb.info/patchnotes/25701366/
store.steampowered.com
https://store.steampowered.com/news/app/1782380/view/670629296167978253
vuldb.com
https://vuldb.com/cve/CVE-2026-116099
vuldb.com
https://vuldb.com/submit/1001276