CVE-2026-91752PoC

LOWCVSS 8.7 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarOffice documents that allocate up to 4 MB on the stack, causing stack overflow and crashing any application extracting metadata from the document.

Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-789

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

Public PoC is present in monitored signal
1 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

PoC

1100.0%

Referenced assets1 URL

By indicator

https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-gnu

Full discourse1 post

Hephaestvs@Vulcanux_46d
PoC
csirt_it: ‼️ #PoC #GNU: rilevate due vulnerabilità con gravità "alta", tra cui la CVE-2026-91752 per la quale è disponibile un Proof of Concept Rischio: 🔴 Tipologia: 🔸 Remote Code Execution 🔸 Denial of Service 🔗 https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-gnu ⚠️ Importa… https://t.co/8M14T8qkiR
Post summary
The post announces two high-severity GNU vulnerabilities, including CVE-2026-91752, and explicitly states that a proof of concept is available, while listing RCE and DoS as vulnerability types.
0000050
636 followersView on X

Explore more

Back to dashboard