CVE ID :CVE-2026-115893 Published : Oct. 23, 2026, 9:29 p.m. | 45 minutes ago Description :Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approximately 256,000...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-115893 - Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

VERWANDTEARTIKEL

CVE-2026-115938 - Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE

CVE-2026-115937 - Unauthenticated payment reuse allows unpaid orders to be marked as paid

CVE-2026-115935 - Control panel only API response emulation replaces "securityKey" and reaches server RCE

CVE-2026-115895 - Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution

CVE-2026-115889 - Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

CVE-2026-58202 - OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation`