CVE-2026-1144

A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used. The patch is identified as ea3e9d77454e8fc9cb3ef3c504e9c16af5a80141. Applying a patch is advised to resolve this issue.

• CWE-119
• CWE-416

• https://github.com/quickjs-ng/quickjs/
• https://github.com/quickjs-ng/quickjs/commit/ea3e9d77454e8fc9cb3ef3c504e9c16af5a80141Patch
• https://github.com/quickjs-ng/quickjs/issues/1301Exploit, Issue Tracking
• https://github.com/quickjs-ng/quickjs/issues/1302Exploit, Issue Tracking
• https://github.com/quickjs-ng/quickjs/pull/1303Issue Tracking, Patch
• https://vuldb.com/?ctiid.341737Permissions Required, VDB Entry
• https://vuldb.com/?id.341737Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.735537Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.735538Third Party Advisory, VDB Entry

Published

Jan 19, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11434A weakness has been identified in FluentCMS 0.0.5. The impac…2.4
• CVE-2026-11435A security vulnerability has been detected in Jinher OA 1.0.…7.3
• CVE-2026-11436A vulnerability was detected in Mage AI up to 0.9.79. This i…4.3
• CVE-2026-11437A flaw has been found in perfree go-fastdfs-web up to 1.3.7.…7.3
• CVE-2026-11438A vulnerability has been found in theonedev onedev up to 15.…6.3
• CVE-2026-11439A vulnerability was found in theonedev onedev up to 15.0.5. …6.3
• CVE-2026-11440A vulnerability was determined in theonedev onedev up to 15.…6.3
• CVE-2026-11441A vulnerability was identified in theonedev onedev up to 15.…6.3
• CVE-2026-11442Allegra exportReport Directory Traversal Information Disclos…6.5
• CVE-2026-11443Allegra downloadAttachment Cross-Site Scripting Authenticati…4.6
• CVE-2026-11447A security flaw has been discovered in GL.iNet GL-MT3000 up …6.3
• CVE-2026-11448A weakness has been identified in GL.iNet GL-MT3000 up to 4.…5.1