Dashboard / CVE-2026-14760

CVE-2026-14760

LOW
INFO Priority: 0.00 BB Relevance: 29/100
Published: 2026-07-05 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: None
VI: None
VA: Low

Description

A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_seek_arch_bits of the file libr/core/disasm.c of the component regprofile Handler. Executing a manipulation can lead to use after free. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This patch is called 8b25c773785d85cb0103410a0905089d286921c2. It is advisable to implement a patch to correct this issue.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
radare radare2 6.1.0 – 6.1.8

References & Advisories (7)

https://vuldb.com/cve/CVE-2026-14760
Third Party Advisory VDB Entry
https://vuldb.com/submit/850384
Third Party Advisory VDB Entry
https://vuldb.com/vuln/376349
Third Party Advisory VDB Entry
https://vuldb.com/vuln/376349/cti
Permissions Required VDB Entry

Bug Bounty Relevance

29 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

1.9 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.20%
Raw Score 0.001990
Percentile 9.7%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00199
2026-10-28
0.00199

Intelligence Sources

nvd ref →

External Links