Scyrix-LLC/CVE-2026-109715

PoC

Root-cause analysis and PoC for CVE-2026-109715: an unguarded CacheIR stub for global-lexical SetGName in Firefox's SpiderMonkey JIT, yielding a cross-object slot-confused Value write from plain JavaScript.

view exploit source poc_in_githubauthor Scyrix-LLCpublished 2026-10-23catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-109715US	—	0.31% (24th)	Exploit	2026-10-13
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbi…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan