cveboard RSS feed

CVE-2026-104192

Critical

dragonflydb dragonfly

  • dragonflydb dragonfly
  • Critical
  • CVSS 9.6
  • EPSS 0.28%
  • No fixed version listed

What to do

No fixed version listed

Plain text

Affected products

ProductAffectedFixed in
dragonflydb dragonfly< 1.40None listed

Scores and signals

Exploitation
No known exploitation
Severity
Critical, CVSS 9.6 (v3.1, scored by GitHub_M)
EPSS
0.28% chance of exploitation in the next 30 days (EPSS from FIRST, as of Oct 24, 2026)
CISA's SSVC decision points
Exploitation: none. Automatable: no. Technical impact: total. As of Oct 13, 2026.
Weakness
CWE-415: Double Free
Vendor
dragonflydb, dragonfly

Timeline

  1. First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.

Sources

All live incidents