CVE-2026-11463 | USCiLab Cereal up to 1.3.2 Shared Pointer type confusion (Issue 870)

A vulnerability classified as critical was found in USCiLab Cereal up to 1.3.2. Affected is an unknown function of the component Shared Pointer Handler. Executing a manipulation can lead to type confusion.

This vulnerability is tracked as CVE-2026-11463. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure.