Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-09-11 | 1 | General1 |
| 2026-09-17 | 2 | Patch2 |
🚨 HIGH severity CVE-2026-89161 (CVSS 7.4) affects PCRE2 <10.48. Memory corruption via pcre2_jit_match mishandling can lead to incorrect free operations. Update to 10.48+ immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/Wdf8AEhgMu
Post summary
The tweet discloses CVE-2026-89161 affecting PCRE2 < 10.48 with memory corruption details and CVSS 7.4, and explicitly urges updating to 10.48+ as remediation.
🚨 HIGH severity CVE-2026-89161 (CVSS 7.4) affects PCRE2 <10.48. Incorrect free operation in pcre2_jit_match can lead to memory corruption. Upgrade to v10.48+ immediately. #CVE #Vulnerability #PatchNow https://t.co/hzbHyO1TRS
Post summary
The tweet discloses CVE‑2026‑89161, a high‑severity memory‑corruption vulnerability in PCRE2 versions before 10.48, and urges immediate upgrade to v10.48+.
CVE-2026-89161 In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur. https://www.cve.org/CVERecord?id=CVE-2026-89161
Post summary
The post references CVE-2026-89161 and describes a double-free issue in PCRE2, but it contains no PoC, exploit code, patch information, or claim of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pcre | pcre2 | - | - | - |
| App | pcre | pcre2 | 10.48 | - | - |