{"id":"CVE-2026-58876","kind":"vulnerability","aliases":["CVE-2026-58876"],"related":[],"title":"Memory-safety use-after-free flaw in unnamed product allows remote code execution","description":"In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"A use-after-free memory bug exists in several places in an unnamed product, according to the NVD entry. The description says an attacker could reach remote code execution without extra privileges and without user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:49+00:00","first_seen_at":"2026-11-02T20:35:32+00:00","triaged_at":"2026-11-02T20:38:54+00:00","updated_at":"2026-11-02T20:38:54+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-02T20:38:54Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Memory-safety use-after-free flaw in unnamed product allows remote code execution","impact":"high","summary":"A use-after-free memory bug exists in several places in an unnamed product, according to the NVD entry. The description says an attacker could reach remote code execution without extra privileges and without user interaction.","audience":"businesses","category":"other","nicknames":[],"who_cares":[],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker runs code remotely on the affected system","analyst_note":"Identify the affected product and versions from the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-58876) and any vendor advisory.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000582,"input_tokens":4069,"output_tokens":351,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':17A,20A '-58876':18A,21A 'accord':37B 'addit':85C 'allow':12A 'attack':46B 'bug':28B 'code':14A,50B,81C 'could':47B,77C 'cve':16A,19A 'descript':43B 'due':69C 'entri':41B 'execut':15A,51B,82C,86C 'exist':29B 'exploit':95C 'extra':53B 'flaw':8A 'free':7A,26B,75C 'interact':58B,90C 'issu':68C 'lead':78C 'locat':61C 'memori':2A,27B,66C 'memory-safeti':1A 'multipl':60C 'need':88C,93C 'nvd':40B 'place':32B 'possibl':65C 'privileg':54B,87C 'product':11A,36B 'reach':48B 'remot':13A,49B,80C 'safeti':3A,67C 'say':44B 'sever':31B 'unnam':10A,35B 'use':5A,24B,73C 'use-after-fre':4A,23B,72C 'user':57B,89C 'without':52B,56B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["other","unknown"],"first_public_at":"2026-11-02T20:17:49+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58876","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58876","severity":null,"published_at":"2026-11-02T20:17:49+00:00","modified_at":"2026-11-02T20:17:49+00:00","first_seen_at":"2026-11-02T20:35:32+00:00","fetched_at":"2026-11-02T20:35:32+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}