Dashboard / CVE-2026-41988

CVE-2026-41988

LOW
INFO Priority: 0.00 BB Relevance: 20/100
Published: 2026-04-23 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

No Interaction

CVSS Vector Breakdown

AV: Local
AC: High
PR: Low
UI: None
S: Unchanged
C: None
I: Low
A: None

Description

uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
uuidjs uuid < 11.1.1
uuidjs uuid 12.0.0
uuidjs uuid 13.0.0

References & Advisories (2)

Bug Bounty Relevance

20 / 100
✓ No user interaction

CVSS Score

2.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS — Exploitation Probability

0.18%
Raw Score 0.001810
Percentile 7.7%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00181
2026-10-28
0.00181

Intelligence Sources

nvd ref →

External Links