CVE-2026-107692: War Thunder 2.57.1.140 to before 2.59.0.9

Affected technology

War Thunder · 2.57.1.140 to before 2.59.0.9
Gaijin Entertainment

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

For temporary authenticated impersonation, enabling an attacker can access game services and certain user data (such as email address and displayed phone number) as the affected user. Source advisory’s CVSS 3.1 assessment (base score 4.8/10) rates confidentiality and integrity impact as low; availability impact as none.