CyberSecBulletin

FascinatedBox vulnerabilities

We track 2 vulnerabilities in FascinatedBox products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 18, 2026.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest FascinatedBox vulnerabilities

  • 7.8 High severity

    lily: Out-of-bounds Write

    CVE-2026-2662FascinatedBox

    A weakness has been identified in FascinatedBox lily up to 2.3. This vulnerability affects the function count_transforms of the file src/lily_emitter.c. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been

  • 7.8 High severity

    lily: Use After Free

    CVE-2026-2660FascinatedBox

    A vulnerability was identified in FascinatedBox lily up to 2.3. Affected by this issue is the function shorthash_for_name of the file src/lily_symtab.c. The manipulation leads to use after free. Local access is required to approach this attack. The exploit is