CVE-2026-92705

Published 9 October 2026 · tracked since 10 October 2026

Description

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Automation Scripts` metadata in `ASS` subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted `

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-103889 CRITICAL 9.8
• CVE-2026-104021 HIGH 7.2
• CVE-2026-104735 MEDIUM 6.4
• CVE-2026-102401 MEDIUM 6.4
• CVE-2026-96743 MEDIUM 6.4
• CVE-2026-94589 CRITICAL 9.8
• CVE-2026-107645 CRITICAL 9.1
• CVE-2026-104732 CRITICAL 9.8
• CVE-2026-104797 HIGH 8.1
• CVE-2026-104898 MEDIUM 6.8

→ Open the live CVE board · all tools