Is CVE-2026-86142 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86142?

CVE-2026-86142 has a CVSS v3 severity of MEDIUM (6.9).

Back

Description

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.