CVE-2026-19445
Use-after-free of a server-side SSLContext when sni_callback switches contexts
CVSS score
9.2
EPSS probability
%0.4
Risk score
0.0
Published
15 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Similar Vulnerabilities
9.4
CVE-2025-4517
Arbitrary writes via tarfile realpath overflow
PS
Patch verified Public Exploits:8EPSS %1
7.5
CVE-2025-4330
Extraction filter bypass for linking outside extraction directory
PS
Patch verified Public Exploits:4EPSS %1
9.1
CVE-2026-6100
Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
PS
Patch verifiedEPSS %1
8.2
CVE-2026-11972
tarfile opened in streaming mode mishandles EOF
PS
Patch verifiedEPSS %1
7.8
CVE-2026-11940
tarfile extraction filter bypass allows escaping the destination directory
PS
Patch verifiedEPSS %1
8.7
CVE-2026-15308
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
PS
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-19445"