MinorCritical vulnerability
CVE-2026-103111 (CVSS 7.6)
NVD · officialPublished Sep 30, 2026Risk 23/100
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.
Technical details
CVSS
7.6
AV:NetworkAC:LowPR:LowUI:NoneC:LowI:HighA:Low
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source