Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-66732— Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager

Quick assessment

Affected
Eukaryot sonic3air
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Eukaryot Sonic 3 A.I.R.是Eukaryot个人开发者的一款重制平台动作游戏。 Eukaryot Sonic 3 A.I.R 2492d18之前版本存在输入验证错误漏洞，该漏洞源于ConnectionManager缺少源地址验证，已建立的连接仅通过两字节本地连接句柄解析而未验证数据报源地址，可能导致路径上的攻击者通过伪造连接标识符向任意会话注入任意数据包，实现会话终止、任意频道消息伪造和请求响应伪造。

CVSS 5.9 · Medium EPSS 0.17% · P7

Affected Version Matrix 2

VendorProduct Version RangeStatus
Eukaryot sonic3air ≤ 26.03.28.0 affected
2492d1882cd2cf1cc1d7415729ce5c4fd686cd4f unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-66732

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager
Source: CVE Program / CVE List V5
Vulnerability Description
Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for the connection. An on-path attacker who can observe cleartext UDP traffic can inject arbitrary packets into any established session by forging the two-byte connection identifier, enabling session termination via TerminateConnectionPacket, arbitrary channel message forgery, and forged request responses without requiring IP address spoofing.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
源验证错误
Source: CVE Program / CVE List V5
Vulnerability Title
Eukaryot Sonic 3 A.I.R 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Eukaryot Sonic 3 A.I.R.是Eukaryot个人开发者的一款重制平台动作游戏。 Eukaryot Sonic 3 A.I.R 2492d18之前版本存在输入验证错误漏洞，该漏洞源于ConnectionManager缺少源地址验证，已建立的连接仅通过两字节本地连接句柄解析而未验证数据报源地址，可能导致路径上的攻击者通过伪造连接标识符向任意会话注入任意数据包，实现会话终止、任意频道消息伪造和请求响应伪造。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Eukaryot sonic3air 0 ~ 26.03.28.0 -

II. Public POCs for CVE-2026-66732

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-66732

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-66732 (1)

Vendor Advisories for CVE-2026-66732 (1)

IV. Related Vulnerabilities

Same product: sonic3air
Same vendor: Eukaryot
Same weakness: CWE-346