Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in FascinatedBox lily up to 2.3. The affected element is the function eval_tree of the file src/lily_emitter.c. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3392 - FascinatedBox lily lily_emitter.c eval_tree null pointer dereference Intel Report: https://ift.tt/uoSUpCJ
Post summary
An alert announces CVE-2026-3392, a null pointer dereference in FascinatedBox’s lily_emitter.c, linked to an Intel report but lacking PoC, exploit, or patch details.
CVE-2026-3392 Local Null Pointer Dereference Exploit in FascinatedBox Lily up to 2.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3392
Post summary
A local null pointer dereference vulnerability (CVE-2026-3392) affecting FascinatedBox Lily up to version 2.3 has been disclosed.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | lily-lang | lily | - | - | - |