CVE-2026-116098: SteelRaven7 Ravenfield RFL Custom Map Handler/RFLD Custom Map cacheCoverPoints deserialization

Published Oct 25, 2026

Updated

A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible. The patch is named EA39 Security Patch. Applying a patch is the recommended action to fix this issue.

Affected Software

1 affected component

SteelRaven7 Ravenfield=25407073

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade SteelRaven7 Ravenfield to a version that resolves this vulnerability.
Patch EA39 Security Patch

Event History

Oct 25, 2026

CVE Published

via MITRE·11:30 PM

Data Sourced

via MITRE·11:30 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attack can be performed remotely and requires user interaction. No attacker privileges are required.

Which component should be prioritized for remediation?

Prioritize systems using the RFL Custom Map Handler or RFLD Custom Map Handler, specifically the cacheCoverPoints function involved in custom map deserialization.

Is a fix available?

Yes. The available fix is named EA39 Security Patch, and applying it is the recommended remediation.