CVE-2026-91779

A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

• CWE-404
• CWE-476

• https://github.com/Ech06/CVE_submit/blob/main/bugzilla/issues/34446.mdThird Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=34446Third Party Advisory
• https://vuldb.com/cve/CVE-2026-91779Third Party Advisory
• https://vuldb.com/submit/933333Third Party Advisory
• https://vuldb.com/vuln/404050Third Party Advisory
• https://vuldb.com/vuln/404050/ctiPermissions Required
• https://www.gnu.org/Product

Published

Sep 15, 2026

Last Modified

Sep 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-91770IceHRM before 36.0.0 fails to validate employee ownership on…6.5
• CVE-2026-91771Weights & Biases wandb before 0.29.0 fails to validate the f…8.8
• CVE-2026-91772Halo through 2.26.1 contains an open redirect vulnerability …6.1
• CVE-2026-91773Soft Serve versions 0.7.1 through 0.11.6 fail to scope Git L…4.3
• CVE-2026-91774Yao through v1.0.0-rc22 authenticates but fails to authorize…4.3
• CVE-2026-91778In affected versions of Octopus Server, users with certain s…7.2
• CVE-2026-9178The WP Forms Connector plugin for WordPress is vulnerable to…7.5
• CVE-2026-91780A weakness has been identified in GNU Binutils 2.47. This im…3.3
• CVE-2026-91781A security vulnerability has been detected in GNU Binutils 2…3.3
• CVE-2026-91782A vulnerability was detected in GNU Binutils 2.47. Affected …3.3
• CVE-2026-91786A flaw was found in GNOME Shell. When processing icons from …6.1
• CVE-2026-9179The WP Forms Connector plugin for WordPress is vulnerable to…7.5