Skip to main content
Version: v1.3.x

CVE-2026-86138

CVE Details

Visit the official vulnerability details page for CVE-2026-86138 to learn more.

Initial Publication

09/05/2026

Last Update

09/08/2026

Third Party Dependency

libxml2

NIST CVE Summary

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.

CVE Severity

6.9

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Awaiting Analysis

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
1.3.2⚠️ Impacted⚠️ Impacted
1.2.2⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.