SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-90681

LOW · CVSS 3.3 EPSS 0.11% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-14 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

A vulnerability exists in the EXIF parsing function of Matthias-Wandel jhead versions up to 3.3, allowing for out-of-bounds reads. This weakness requires local access to exploit, and although it is classified as low severity, public exploit code is available. Users and administrators of affected systems should prioritize patching or mitigating this issue to prevent potential local attacks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-90681
Severity
LOW
CVSS
3.3
EPSS
0.11%

Original NVD Description

A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.