Feed›Vulnerability›Metal Gear Online 3 flaw allowed code execution on players’ ...
VulnerabilityCyber Insider
9.0 — CRITICAL

Metal Gear Online 3 flaw allowed code execution on players’ PCs

📅 24 August 2026 at 16:43 UTC📰 Cyber InsiderView original source ↗
Metal Gear Online 3 flaw allowed code execution on players’ PCs

A vulnerability in Konami’s Metal Gear Online 3 allowed malicious multiplayer lobby hosts to remotely execute arbitrary code on the computers of players joining their sessions. The flaw, tracked as CVE-2026-19874, was silently fixed earlier this month in game version 1.1.2.9. The vulnerability was reported by security researcher Alice Cecchetto, according to a bulletin published … The post Metal Gear Online 3 flaw allowed code execution on players’ PCs appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview

A heap-based buffer overflow vulnerability in Metal Gear Online 3 allowed malicious hosts to remotely execute arbitrary code on players' PCs, with exploitation occurring automatically when a victim joins an attacker-controlled lobby.

⚙️Technical Details
CVEs
CVE-2026-19874
Affected Systems
Metal Gear Solid V: The Phantom Pain (PC)
Attack Vectors
Joining an attacker-controlled lobbyManipulating oversized values to cause out-of-bounds writes into adjacent heap memory
💥Impact Assessment
Severity: critical
Who Is at Risk
Players joining public or untrusted multiplayer lobbies in Metal Gear Online 3Severity: critical
🛡️Recommended Actions
1Ensure Steam has updated Metal Gear Solid V to the latest available build before using Metal Gear Online 3
2Disable automatic updates and apply the current version manually if necessary
3Use a reputable antivirus program to monitor for suspicious activity
📦Affected Products
Metal Gear Solid V: The Phantom Pain (PC)
🔐NVD Verified DataVERIFIED

Read the full article

This is a curated summary. The complete article is available at Cyber Insider.

Read on Cyber Insider ↗
← Back to feed