CVE-2026-5037Disclosure

LOWCVSS 1.9 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in mxml up to 4.0.4. This issue affects the function index_sort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. This patch is called 6e27354466092a1ac65601e01ce6708710bb9fa5. A patch should be applied to remediate this issue.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-29: 2Technical Details · 2026-03-29: 103-29
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-5037 📊 Severity: 3.3 🚨 Risk Level: Low 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5037 #CVE-2026-5037 #CVE #Low #CyberSecurity #InfoSec https://t.co/SVm5siyFnm

    Post summary

    The tweet simply announces the existence of CVE‑2026‑5037 with basic severity information, lacking any detailed technical data, exploit code, or further context.

    0001033
    123 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-5037 A vulnerability was determined in mxml up to 4.0.4. This issue affects the function index_sort of the file mxml-index.c of the component mxmlIndexNew. Executing a manip… https://www.cve.org/CVERecord?id=CVE-2026-5037

    Post summary

    The text reports that CVE-2026-5037 impacts mxml up to version 4.0.4, specifically the index_sort function in mxml-index.c, with no PoC, exploit, patch, or active exploitation details.

    00000102
    56.9K followersView on X

Explore more