CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure, or cause the daemon to crash, resulting in a Denial of Service (DoS).

• CWE-125

• https://access.redhat.com/security/cve/CVE-2026-114038
• https://bugzilla.redhat.com/show_bug.cgi?id=2469787

Published

Oct 21, 2026

Last Modified

Oct 22, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11399The Helpdesk Support Ticket System for WooCommerce plugin fo…4.3
• CVE-2026-1140A vulnerability was found in UTT 进取 520W 1.7.7-180627. This …8.8
• CVE-2026-11400An untrusted search path issue in the GlobalDatabasePlugin i…8
• CVE-2026-11401An untrusted search path issue in the GlobalDatabasePlugin i…8.6
• CVE-2026-11402The Services Section Block – Showcase Service Details in Gri…6.4
• CVE-2026-11403A vulnerability in Sonatype Nexus Repository Manager's forma…7.5
• CVE-2026-114039A weakness has been identified in projectworlds Advanced Lib…6.3
• CVE-2026-11404Cesanta Mongoose before 7.22 contains an out-of-bounds read …7.5
• CVE-2026-114040A security vulnerability has been detected in DT42 BerryNet …3.5
• CVE-2026-114041FreeRDP before 3.32.1 on Windows contains a heap out-of-boun…6.5
• CVE-2026-114042FreeRDP 3.32.0 contains a use-after-free vulnerability in th…6.5
• CVE-2026-114043FreeRDP before 3.32.1 contains a heap-based out-of-bounds re…6.5