{"schema":"vulnpedia.research/1","cve":"CVE-2026-115393","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hgjw-h833-99q9","tags":["vendor-advisory","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:59.314Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:59.314Z","url":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hgjw-h833-99q9"},{"source":"nvd","sourceId":"CVE-2026-115393","modified":"2026-10-22T19:17:47.150","url":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hgjw-h833-99q9"},{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hgjw-h833-99q9"}]},{"url":"https://www.vulncheck.com/advisories/wasmtime-before-24.0.12-25.0.0-before-36.0.13-37.0.0-before-46.0.2-and-47.0.0-before-47.0.3-cross-engine-type-confusion","tags":["third-party-advisory","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:59.314Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-22T19:13:59.314Z","url":"https://www.vulncheck.com/advisories/wasmtime-before-24.0.12-25.0.0-before-36.0.13-37.0.0-before-46.0.2-and-47.0.0-before-47.0.3-cross-engine-type-confusion"},{"source":"nvd","sourceId":"CVE-2026-115393","modified":"2026-10-22T19:17:47.150","url":"https://www.vulncheck.com/advisories/wasmtime-before-24.0.12-25.0.0-before-36.0.13-37.0.0-before-46.0.2-and-47.0.0-before-47.0.3-cross-engine-type-confusion"},{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://www.vulncheck.com/advisories/wasmtime-before-24.0.12-25.0.0-before-36.0.13-37.0.0-before-46.0.2-and-47.0.0-before-47.0.3-cross-engine-type-confusion"}]},{"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0222","tags":["ADVISORY"],"source":"rustsec","sourceId":"RUSTSEC-2026-0222","modified":"2026-10-24T06:25:41Z","origins":[{"source":"rustsec","sourceId":"RUSTSEC-2026-0222","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0222"},{"source":"rustsec","sourceId":"RUSTSEC-2026-0222","modified":"2026-10-24T06:25:41Z","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0222"}]},{"url":"https://crates.io/crates/wasmtime","tags":["PACKAGE"],"source":"rustsec","sourceId":"RUSTSEC-2026-0222","modified":"2026-10-24T06:25:41Z","origins":[{"source":"rustsec","sourceId":"RUSTSEC-2026-0222","url":"https://crates.io/crates/wasmtime"},{"source":"rustsec","sourceId":"RUSTSEC-2026-0222","modified":"2026-10-24T06:25:41Z","url":"https://crates.io/crates/wasmtime"}]},{"url":"https://rustsec.org/advisories/RUSTSEC-2026-0222.html","tags":["ADVISORY"],"source":"rustsec","sourceId":"RUSTSEC-2026-0222","modified":"2026-10-24T06:25:41Z","origins":[{"source":"rustsec","sourceId":"RUSTSEC-2026-0222","url":"https://rustsec.org/advisories/RUSTSEC-2026-0222.html"},{"source":"rustsec","sourceId":"RUSTSEC-2026-0222","modified":"2026-10-24T06:25:41Z","url":"https://rustsec.org/advisories/RUSTSEC-2026-0222.html"}]},{"url":"https://github.com/bytecodealliance/wasmtime/pull/14044","tags":["WEB"],"source":"rustsec","sourceId":"RUSTSEC-2026-0222","modified":"2026-10-24T06:25:41Z","origins":[{"source":"rustsec","sourceId":"RUSTSEC-2026-0222","url":"https://github.com/bytecodealliance/wasmtime/pull/14044"},{"source":"rustsec","sourceId":"RUSTSEC-2026-0222","modified":"2026-10-24T06:25:41Z","url":"https://github.com/bytecodealliance/wasmtime/pull/14044"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-115393.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-115393.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-115393","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-115393"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2559290","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2559290"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-115393","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-115393"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115393","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115393"}]},{"source":"euvd","sourceId":"EUVD-2026-108327","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108327","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-108327","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108327"}]}],"packages":[{"source":"rustsec","sourceId":"RUSTSEC-2026-0222","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0222","ecosystem":"crates.io","name":"wasmtime","purl":"pkg:cargo/wasmtime","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"24.0.12"},{"introduced":"25.0.0"},{"fixed":"36.0.13"},{"introduced":"37.0.0"},{"fixed":"46.0.2"},{"introduced":"47.0.0"},{"fixed":"47.0.3"}]}],"ecosystemSpecific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"databaseSpecific":{"categories":[],"cvss":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0222.json"},"modified":"2026-10-24T06:25:41Z","origins":[{"source":"rustsec","sourceId":"RUSTSEC-2026-0222","modified":"2026-10-24T06:25:41Z","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0222"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-115393.json","productId":"red_hat_connectivity_link_1:rhcl-1/wasm-shim-rhel9","product":"rhcl-1/wasm-shim-rhel9 as a component of Red Hat Connectivity Link 1","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/wasm-shim-rhel9@sha256:6bcf6af9919f21fa2df4bda13fabca665b315815dadc22a79f6d39464fb492f9?repository_url=registry.redhat.io/rhcl-1/wasm-shim-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-115393.json"}]},{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-115393.json","productId":"red_hat_enterprise_linux_10:libtree-sitter","product":"libtree-sitter as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/libtree-sitter","origins":[{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-115393.json"}]},{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-115393.json","productId":"red_hat_enterprise_linux_10:libtree-sitter-devel","product":"libtree-sitter-devel as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/libtree-sitter-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-115393.json"}]},{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-115393.json","productId":"red_hat_enterprise_linux_10:virt-firmware-rs.src","product":"virt-firmware-rs.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/virt-firmware-rs@26.4-1.el10?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-115393","modified":"2026-10-23T00:38:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-115393.json"}]}],"vendorCoverage":{"total":4,"shown":4,"omitted":0,"source":"redhat"}}