CVE-2026-19935
Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardown
CVSS score
7.5
EPSS probability
%0.2
Risk score
0.0
Published
4 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2026-5067
Out-of-bounds write in Zephyrproject
Z
Patch verifiedEPSS %1
7.5
CVE-2026-8023
Path traversal in Zephyrproject
Z
Patch verified Public Exploits:1EPSS %1
9.8
CVE-2026-10666
Vulnerability in Zephyrproject
Z
Patch verifiedEPSS %1
9.1
CVE-2026-10672
Out-of-bounds read in Zephyrproject
Z
Patch verified Public Exploits:1EPSS %1
9.8
CVE-2026-13214
Stack buffer overflow in OCPP GetConfiguration key parsing
Z
Patch verifiedEPSS %1
8.2
CVE-2025-2962
Infinite loop in dns_copy_qname
Z
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-19935"