What is the CVSS score of CVE-2026-4698?

CVE-2026-4698 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Red Hat are affected by CVE-2026-4698?

CVE-2026-4698 presents critical security risk rated CVSS 9.8. Successful exploitation could critically impact the confidentiality, integrity, and availability of affected systems.. A patch is available.

Red Hat CVE-2026-4698

Q: How to fix or mitigate CVE-2026-4698?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Monitor vendor channels for patch availability.

EUVD-2026-14813 CRITICAL

Access of Resource Using Incompatible Type (Type Confusion) (CWE-843)

2026-03-24 mozilla

Information Disclosure Memory Corruption Red Hat Mozilla Suse

9.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 24, 2026 - 12:45 euvd

EUVD-2026-14813

Analysis Generated

Mar 24, 2026 - 12:45 vuln.today

CVE Published

Mar 24, 2026 - 12:30 nvd

CRITICAL 9.8

DescriptionNVD

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, and Firefox ESR < 140.9.

AnalysisAI

A JIT miscompilation vulnerability exists in Firefox's JavaScript engine that can lead to information disclosure. This affects Firefox versions below 149, Firefox ESR below 115.34, and Firefox ESR below 140.9. …

RemediationAI

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Monitor vendor channels for patch availability.

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

More from same product – last 7 days

CVE-2026-44739 HIGH This Week

8.7 May 27

SQL injection in Pimcore's CustomReportsBundle (versions ≤ 12.3.5) lets an authenticated user holding the reports_config

CVE-2026-9277 HIGH This Week

8.1 May 22

Command injection in the shell-quote npm package allows attackers who can influence object-token inputs to inject arbitr

CVE-2026-9256 HIGH This Week

8.1 May 22

Heap buffer overflow in NGINX Plus and NGINX Open Source ngx_http_rewrite_module allows unauthenticated remote attackers

Vendor StatusVendor

Debian

firefox

Release	Status	Fixed Version	Urgency
sid	vulnerable	148.0.2-1	-
(unstable)	fixed	(unfixed)	-

firefox-esr

Release	Status	Fixed Version	Urgency
bullseye	vulnerable	115.14.0esr-1~deb11u1	-
bullseye (security)	vulnerable	140.8.0esr-1~deb11u1	-
bookworm	vulnerable	128.14.0esr-1~deb12u1	-
bookworm (security)	vulnerable	140.8.0esr-1~deb12u1	-
trixie (security), trixie	vulnerable	140.8.0esr-1~deb13u1	-
forky, sid	vulnerable	140.8.0esr-1	-
(unstable)	fixed	(unfixed)	-

CVE-2026-4698 vulnerability details – vuln.today

Back

Red Hat CVE-2026-4698

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

More from same product – last 7 days

Vendor StatusVendor

Debian

Share

External POC / Exploit Code