What is the CVSS score of EUVD-2026-63549?

EUVD-2026-63549 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2026-63549?

Yes, a patch is available for EUVD-2026-63549. Update the affected software to the latest version immediately.

libgit2 EUVD-2026-63549

| CVE-2026-53583 MEDIUM

Improper Certificate Validation (CWE-295)

N/A vendor:alpine

Information Disclosure

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Patch available

Aug 20, 2026 - 19:03 EUVD

Analysis Generated

Jul 19, 2026 - 21:31 vuln.today

DescriptionCVE.org

Alpine Linux: libgit2 fixed in 1.9.6-r0

AnalysisAI

libgit2, the portable C library implementing Git core methods, has a security fix issued in Alpine Linux package version 1.9.6-r0. The nature of the underlying vulnerability is not disclosed in available intelligence - only the fix version and the reporting vendor (Alpine) are confirmed. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Unknown prerequisites

Exploit

Trigger libgit2 vulnerability

Impact

Achieve unknown impact

Access

Unknown prerequisites

Exploit

Trigger libgit2 vulnerability

Impact

Achieve unknown impact

Vulnerability AssessmentAI

Exploitation	Exploitation conditions cannot be determined from available data. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Risk cannot be meaningfully quantified from available data. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	No exploit scenario can be constructed from available data. The vulnerability type, attack vector, required privileges, and impact are all unknown. …
Remediation	On Alpine Linux, upgrade the libgit2 package to version 1.9.6-r0 or later using the standard package manager: 'apk upgrade libgit2'. … Detailed patch versions, workarounds, and compensating controls in full report.