6 matches found
CVE-2026-14765
Epic Games Unreal Engine versions up to and including 5.8.0 are vulnerable to command execution due to an insecure default configuration in the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL ). The FURLRequestFilter is empty by default, allowing all URL schemes. On Windows, this trigge...
CVE-2026-14765 Epic Games Unreal Engine Insecure Default URL Scheme Allowance in LaunchURL
Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, which permits all URL schemes. On Windows, this results in a call ...
EUVD-2026-100781
Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, which permits all URL schemes. On Windows, this results in a call ...
CVE-2026-14765 Epic Games Unreal Engine Insecure Default URL Scheme Allowance in LaunchURL
Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, which permits all URL schemes. On Windows, this results in a call ...
PT-2026-113608
Name of the Vulnerable Software and Affected Versions Unreal Engine versions prior to 5.8.1 Description The software contains an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, allowing a...
CVE-2026-14765: Initialization of a Resource with an Insecure Default
Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, which permits all URL schemes. On Windows, this results in a call ...