SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-46452

MEDIUM · CVSS 5.3 EPSS 0.56% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-24 · Last synced 2026-08-23

CyberRota Analysis

AI-Generated

Apache NimBLE versions up to 1.9.0 are vulnerable due to improper input validation in the Mesh Proxy SAR reassembly, potentially leading to memory pressure and unstable parsing behavior. This vulnerability could impact applications relying on NimBLE, causing operational instability. Organizations using affected versions should prioritize upgrading to version 1.10.0 to mitigate these risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-46452
Severity
MEDIUM
CVSS
5.3
EPSS
0.56%
Apache

Original NVD Description

Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken data toward application resulting in memory pressure and unstable parsing behavior. This issue affects Apache NimBLE: through 1.9.0. Users are recommended to upgrade to version 1.10.0, which fixes the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)