CVE-2026-89603High· 7.8▾ TwilightRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
— → 7.8
none → high
— → 7.8
none → high
— → 8.4
none → high
8.4 → 7.8
7.8 → 8.4
8.4 → 7
7 → 7.8
Last analysed / modified upstream
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-68338High· 7.0kernel: net/packet: avoid fanout hook re-registration after unregister (CVE-2026-68338)
CVE-2026-52945High· 7.5In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" This reverts commit 933466fc50a8e4eb167acbd0d8ec96a078462e9c which is commit db9ae3b6b43c79b1ba87eea849fd65efa05b4b2e …
CVE-2026-77063Low· 3.7multer: Multer: File size limit bypass via asynchronous file filter race condition (CVE-2026-77063)
CVE-2026-106071Low· 3.6nodejs: nodejs: Permission model bypass via wildcard path matching flaw (CVE-2026-106071)
CVE-2026-106070Low· 3.7nodejs: Node.js: Security inspection bypass via crafted ZIP archive header mismatch (CVE-2026-106070)
CVE-2026-105481Medium· 6.5nodejs: nodejs: Response desynchronization via improper HTTP keep-alive connection reuse (CVE-2026-105481)