CVE-2026-25884

Risk Scores

Affected Products

Exploit Intelligence

• https://github.com/Exiv2/exiv2/security/advisories/GHSA-9mxq-4j5g-5wrp (nist-nvd)
• CIRCL seen: CVE-2026-25884 (circl-sighting)
• https://github.com/Exiv2/exiv2/pull/3462 (circl)
• https://github.com/Exiv2/exiv2/commit/cbba4d206512fe63e12d164fdd1881562f072a9d (circl)

Timeline

• Feb 6, 2026 CVE ID Reserved
• Mar 2, 2026 CVE Published
• Mar 2, 2026 CVE Updated
• Mar 3, 2026 EPSS Score
• Mar 3, 2026 PoC Published
• Mar 4, 2026 EPSS Score
• Mar 6, 2026 EPSS Score
• Mar 7, 2026 EPSS Score
• Mar 8, 2026 EPSS Score
• Mar 10, 2026 EPSS Score
• Mar 11, 2026 EPSS Score
• Mar 12, 2026 EPSS Score

References

• ALAS2-2026-3201: exiv2 (important) advisory