Security Advisory

CVE-2026-86137

2.9
LOW

Vulnerability Description

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
Published Date September 5, 2026
Official Source NIST NVD Advisory