VDB
CVE-2026-86140
CVE-2026-86140
PUBLISHED
CVSS 8 HIGH
Reported by mitre · Published September 5, 2026
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.
Risk Scores
CVSS 3.1
8
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| xmlsoft | libxml2 | 0 |
| xmlsoft | libxml2 | 0, 0, 0 |
Timeline
- Sep 5, 2026 EPSS Score
- Sep 5, 2026 Coalition ESS Score
- Sep 5, 2026 CVE Published
- Sep 8, 2026 CVE Updated
- Sep 16, 2026 EPSS Score