SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89162

LOW · CVSS 2.9 EPSS 0.10% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-13

CyberRota Analysis

AI-Generated

PCRE2 versions prior to 10.48 contain a vulnerability in the pcre2_serialize_encode function that may inadvertently expose two bytes of sensitive data to an attacker, particularly in environments where access controls are already compromised. While the severity is rated low, organizations using affected versions should prioritize patching to mitigate potential data leakage risks, especially in security-sensitive applications.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-89162
Severity
LOW
CVSS
2.9
EPSS
0.10%

Original NVD Description

In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.