CVE-2026-116230: Ndemic Creations Plague Inc Evolved Workshop Scenario Loader deserialization
A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the component Workshop Scenario Loader. Such manipulation leads to deserialization. The attack may be performed from remote. Upgrading to version 1.24.0.4 is sufficient to fix this issue. It is recommended to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ndemic Creations Plague Inc Evolvedto a version that resolves this vulnerability.Fixed in 1.24.0.4
Event History
Frequently Asked Questions
Which installations are affected?
Plague Inc: Evolved installations up to version 1.24.0.3 are affected in the Workshop Scenario Loader component. Version 1.24.0.4 fixes the issue.
Does exploitation require local access or prior privileges?
The attack may be performed remotely, and the supplied vector indicates no privileges are required. User interaction is required.
What should teams do if they are running an affected version?
Upgrade Plague Inc: Evolved to version 1.24.0.4. The available information identifies upgrading as the sufficient remediation.