OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-92612

LOW · CVSS 1 EPSS 0.15% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-21 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

Eclipse iceoryx2 versions greater than v0.8.0 are vulnerable due to the StaticString exposing mutable bytes through safe APIs, allowing the creation of invalid Rust string slices without UTF-8 validation. This can lead to undefined behavior in applications, potentially causing crashes or security issues. Developers using affected versions should prioritize addressing this vulnerability to ensure application stability and security.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-92612
Severity
LOW
CVSS
1
EPSS
0.15%

Original NVD Description

In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavior using entirely safe Rust.