Integer overflow in Comodo Internet Security
CVE-2026-49494
Xcitium Client Security (XCS) before 13.8.2.10019 and Comodo Internet Security (CIS) through 12.3.4.8162 (fix expected by 2026 Q3) contain an integer underflow vulnerability in the firewall driver Inspect.sys that allows remote unauthentic…
EPSS: 0.005 (42.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Comodo Internet Security — versions 0
- Xcitium Client Security (Xcs) — versions 0
- Xcitium (Formerly Comodo Security Solutions) Internet — versions 0
Weakness classification (CWE)
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (technical-description, exploit)
- disclosure@vulncheck.com (third-party-advisory)
- disclosure@vulncheck.com (release-notes, patch)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2026-49494?
- CVE-2026-49494 is a high-severity vulnerability in Comodo Internet Security, classified under Integer Underflow. CVSS score: 7.5/10. Published 2026-06-07.
- How severe is CVE-2026-49494?
- High severity. CVSS v3 base score is 7.5 out of 10.