What is CVE-2026-89162?

CVE-2026-89162 is a low-severity vulnerability in Pcre Pcre2, classified under Incorrect Resource Transfer Between Spheres. CVSS score: 2.9/10. Published 2026-09-11.

How severe is CVE-2026-89162?

Low severity. CVSS v3 base score is 2.9 out of 10.

Vulnerability in Pcre Pcre2

CVE-2026-89162

In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.

CVSS v3 metric

CVSS v3 base score 2.9 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Pcre Pcre2

Weakness classification (CWE)

CWE-669 — Incorrect Resource Transfer Between Spheres

References

cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2026-89162?: CVE-2026-89162 is a low-severity vulnerability in Pcre Pcre2, classified under Incorrect Resource Transfer Between Spheres. CVSS score: 2.9/10. Published 2026-09-11.
How severe is CVE-2026-89162?: Low severity. CVSS v3 base score is 2.9 out of 10.