war_thunder vulnerabilities

CVEs whose affected-version data names the war_thunder package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107692Medium· 4.8PoC

yesterday

War Thunder Account Impersonation

The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption. An attacker positioned on the network path can pas…

▾ TwilightGaijin Entertainment · War Thundervia CVEORG