CVE-2026-81574: CWE-134 Use of Externally-Controlled format string in wibu-systems-ag codemeter-runtime
Description
CVE-2026-81574 is a high-severity vulnerability in Wibu-Systems-AG CodeMeter Runtime before versions 8.41a and 9.10. The logger component does not sanitize input strings properly, allowing attackers to inject printf-style format specifiers. This can cause the application to crash and potentially disclose sensitive information such as process memory and stack canaries. The vulnerability can be exploited locally by setting proxy values and remotely when combined with another vulnerability (CVE-2026-81573).
CVSS v3.1
Score 8.2high
Affected software
wibu-systems-ag
codemeter-runtime
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves an externally-controlled format string issue (CWE-134) in the CodeMeter Runtime logger. Unsanitized input strings allow injection of format specifiers, leading to reliable crashes and information disclosure including process memory and stack canaries. Local exploitation is possible via the cmu --set-proxy command, and remote exploitation can occur when combined with CVE-2026-81573 by setting General.ProxyServer and triggering the flaw. The affected versions include 7.00, 8.00, and 9.00. No official remediation or patch information is currently available.
Potential Impact
Successful exploitation can cause denial of service by crashing the CodeMeter Runtime and can disclose sensitive information such as process memory contents and stack canaries, which may aid further attacks. The vulnerability is remotely exploitable when chained with CVE-2026-81573, increasing its risk profile.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid using vulnerable versions or restrict access to the affected components to trusted users only. Monitor vendor communications for updates on patches or mitigations.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- wibu
- Date Reserved
- 2026-08-27T07:01:24.780Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a9001f8acd9273b49109409
Added to database: 08/27/2026, 09:23:04 UTC
Last enriched: 09/09/2026, 11:22:26 UTC
Last updated: 10/10/2026, 18:48:23 UTC
Views: 103
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.