CVE-2026-43864Active Exploitation

LOWCVSS 2.5 · LOW

Exploitation ongoing with high activity in latest observed window (2 mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.

Back to dashboard

3.5/ 10 priority

Sources & remediation

Other references

https://github.com/muttmua/mutt/commit/ebfa2969042d89303d15334193fcc32866c8a8df

Weakness type (CWE)

CWE-476

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

Active exploitation appears in 1 classified signals
2 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Active Exploitation

150.0%

Disclosure

150.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

VulDB 🛡@vuldb157d
Active Exploitation
Attention, elevated activities detected targeting mutt (CVE-2026-43864) https://vuldb.com/vuln/360948/cti
Post summary
The alert reports active exploitation of CVE-2026-43864 against Mutt, noting elevated activity, but provides no PoC, patch, or technical details.
0000055
2.1K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds157d
Disclosure
CVE-2026-43864 NULL Pointer Dereference in Mutt Before 2.3.2 show_sig_summary https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-43864 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The text announces CVE-2026-43864, detailing a NULL pointer dereference in Mutt before version 2.3.2’s show_sig_summary, and links to Vulmon for further information.
0000049
4.0K followersView on X

Explore more

Back to dashboard