CVE-2026-52349
Possible ATT&CK Techniques 1AI
T1210 · Exploitation of Remote ServicesGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-52349
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a local attacker to execute arbitrary code via the Spooner file management, VehicleSpawner save/folder/rename functionality, WeaponOptions save/folder/rename functionality, PedComponentChanger create folder/createfile/rename functionality.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
itsjustcurtis Menyoo 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
itsjustcurtis Menyoo是itsjustcurtis个人开发者开源的一款《侠盗猎车手V》（GTA V）单人模式及FiveM训练器模组（ASI插件）。 itsjustcurtis Menyoo 2.0版本存在安全漏洞，该漏洞源于Spooner文件管理、VehicleSpawner保存/文件夹/重命名功能、WeaponOptions保存/文件夹/重命名功能、PedComponentChanger创建文件夹/创建文件/重命名功能存在目录遍历漏洞，可能导致本地攻击者执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2026-52349
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-52349
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-52349 (2)
Same Patch Batch · n/a · 2026-07-20 · 14 CVEs total
| CVE-2026-51027 | 9.9 CRITICAL | Frances Leese File Thingie 日志信息泄露漏洞 |
| CVE-2026-51385 | 6.9 MEDIUM | safishamsi Open-Source GRAPHIFY 安全漏洞 |
| CVE-2026-51026 | 6.5 MEDIUM | Frances Leese File Thingie 路径遍历漏洞 |
| CVE-2026-26483 | Mettle sendportal 跨站脚本漏洞 | |
| CVE-2024-51313 | Tenda TX9 缓冲区溢出漏洞 | |
| CVE-2024-51311 | Tenda TX9 安全漏洞 | |
| CVE-2024-51312 | Tenda TX9 缓冲区溢出漏洞 | |
| CVE-2024-51316 | Tenda TX9 拒绝服务漏洞 | |
| CVE-2024-51315 | Tenda TX9 缓冲区溢出漏洞 | |
| CVE-2024-51314 | Tenda TX9 缓冲区溢出漏洞 | |
| CVE-2026-52656 | SJCAM AllWinner Tech products SJ4000-Air 安全漏洞 | |
| CVE-2026-51025 | zach fuint 安全漏洞 | |
| CVE-2026-51031 | FlareSolverr 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-52349
No comments yet