CVE-2026-21619: Affected product not specified by the source

CVE-2026-21619. EPSS 0.0061 (percentile 0.48617), scored 24-Oct-2026. Fixed version: 619df55d9dab109cbd1b5d9ed1d45c93f5450e24. Fixed version: 1d4478f527e373de0b225951e53115450e0d9b9d. Fixed version: 520a3838751eefcb27900ba67fddd1864c055a81. Fixed version: 636739f3322514e9303ca335fb630696fcbb3c95. Fixed version: 0573013a21a676fb85a0e30db49f81c44ec8f97d. Fixed version: cdf726095bca85ad2549d146df1e831ae93c2b13.

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (OSV, CVSS 4.0): Network (remote) · Low privileges required · Active user interaction

What an attacker can do

OSV’s CVSS 4.0 assessment rates confidentiality and integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 25-Oct-2026 10:21 UTC

CCR priority: 0.2 /100 (P5)
CVSS 4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N · OSV.dev
EPSS: 0.0061 · percentile 0.48617 · 2026-10-24
KEV: no

Provenance

OSV.dev · Source record · observed 2026-10-25 01:59:11.642217+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-21619.html