CVE-2026-86141
âšī¸ lowSummary
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.
CVSS Score
2.9
Low
EPSS Score
0.1
Exploit Probability
Published Date
2026-09-05
First Seen: 2026-09-06
đ Relative Risk Intelligence
This CVE is Lower Risk - more severe than 1.7% of all 353,175 vulnerabilities in our database.
#347,169
Below average severity
Severity Percentile
Last Modified
2026-09-05
Source
NVD đ
CVSS Vector 3.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE IDs (Weakness Types)