SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-86140

HIGH · CVSS 8 EPSS 0.15% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-05 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A stack-based buffer overflow vulnerability exists in the xmlSnprintfElements function of libxml2 versions prior to 2.15.4, potentially allowing attackers to execute arbitrary code or crash the application. This issue primarily affects applications utilizing libxml2 for XML processing, and organizations relying on this library should prioritize patching to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-86140
Severity
HIGH
CVSS
8
EPSS
0.15%

Original NVD Description

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-86144 MEDIUM CVE-2026-86143 MEDIUM CVE-2026-86142 MEDIUM CVE-2026-86141 LOW CVE-2026-86139 MEDIUM CVE-2026-86138 MEDIUM