CVE-2026-24874: Themrdemonized Xray-Monolith

Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in themrdemonized xray-monolith.This issue affects xray-monolith: before 2025.12.30.

Affected products

• Themrdemonized Xray-Monolith: before 2025.12.30 (fixed in 2025.12.30)

Published 2026-01-27. Last modified 2026-08-31.