Epic Games CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Epic Games CVE published 2026-10-14

CVE-2026-14765

Epic Games Unreal Engine versions up to and including 5.8.0 contain an insecure default configuration for the LaunchURL Blueprint node, permitting all URL schemes and potentially allowing command execution via malicious local or remote files. This vulnerability, identified as CWE-1188 (Initialization of a Resource with an Insecure Default), can lead to command execution when loading user-generated content [truncated]