{"id":"CVE-2026-48186","kind":"vulnerability","aliases":["CVE-2026-48186"],"related":[],"title":"Messages before AS security activation cause unexpected behavior in an unnamed product","description":"Improper handling of messages before AS security activation can cause unexpected behavior","summary":"The sources say the software mishandles messages received before AS security activation, which can cause unexpected behavior. The sources do not name the product, the versions, or what an attacker can gain.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other","unknown"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-05T03:17:28+00:00","first_seen_at":"2026-11-05T03:31:44+00:00","triaged_at":"2026-11-05T03:33:43+00:00","updated_at":"2026-11-05T03:33:43+00:00","category":"other","confidence":0.2,"triage":{"at":"2026-11-05T03:33:43Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Messages before AS security activation cause unexpected behavior in an unnamed product","impact":"low","summary":"The sources say the software mishandles messages received before AS security activation, which can cause unexpected behavior. The sources do not name the product, the versions, or what an attacker can gain.","audience":"businesses","category":"other","nicknames":[],"who_cares":["unknown"],"confidence":0.2,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown","analyst_note":"Identify the affected product and versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-48186 and find what 'AS' refers to here.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000585,"input_tokens":4128,"output_tokens":344,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-48186':15A,18A 'activ':5A,32B,60C 'attack':50B 'behavior':8A,37B,64C 'caus':6A,35B,62C 'cve':13A,16A 'gain':52B 'handl':54C 'improp':53C 'messag':1A,27B,56C 'mishandl':26B 'name':42B 'product':12A,44B 'receiv':28B 'say':23B 'secur':4A,31B,59C 'softwar':25B 'sourc':22B,39B 'unexpect':7A,36B,63C 'unknown':20B 'unnam':11A 'version':46B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["other","unknown"],"campaign_type":null,"first_public_at":"2026-11-05T03:17:28+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-48186","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48186","severity":null,"published_at":"2026-11-05T03:17:28+00:00","modified_at":"2026-11-05T03:17:28+00:00","first_seen_at":"2026-11-05T03:31:44+00:00","fetched_at":"2026-11-05T03:31:44+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}