CyberRota Analysis
AI-GeneratedThe vulnerability in libxml2 prior to version 2.15.4 involves an out-of-bounds read in the xmlFAParsePosCharGroup function, which could potentially lead to information disclosure or application crashes. Although the severity is rated low, developers and organizations using affected versions of libxml2 should prioritize updating to mitigate any risks associated with this flaw.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2026-86137
Severity
LOW
CVSS
2.9
EPSS
0.12%
Original NVD Description
In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.