CVE-2026-40467

Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

• CWE-416

• https://cert.pl/en/posts/2026/07/CVE-2026-40467Third Party Advisory
• https://cgit.git.savannah.gnu.org/cgit/gawk.git/commit/?id=a2d18c74109e41bec29a23098eba2e00057286d8Patch

Published

Jul 13, 2026

Last Modified

Jul 14, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40461Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POS…7.5
• CVE-2026-40462Incorrect permission assignment vulnerabilities exist in iCo…7.1
• CVE-2026-40463WaveSuite is affected by an insufficient role-based access c…7.6
• CVE-2026-40464NSP is vulnerable to a stored XSS due to insufficient valida…5.4
• CVE-2026-40465NSP is vulnerable to an open redirect due to insufficient se…5.3
• CVE-2026-40466Improper Input Validation, Improper Control of Generation of…8.8
• CVE-2026-40468Integer overflow vulnerability has been found in "builtin.c"…9.1
• CVE-2026-40469Integer overflow vulnerability has been found in "builtin.c"…9.1
• CVE-2026-40470A critical XSS vulnerability affected hackage-server and hac…9.9
• CVE-2026-40471hackage-server lacked Cross-Site Request Forgery (CSRF) prot…9.6
• CVE-2026-40472In hackage-server, user-controlled metadata from .cabal file…9.9
• CVE-2026-40473The camel-mina component's MinaConverter.toObjectInput(IoBuf…8.8