What is CVE-2026-115392?

CVE-2026-115392 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes

Which CVE IDs does CVE-2026-115392 cover?

CVE-2026-115392 covers the following CVE IDs: CVE-2026-115392. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2026-115392?

CVE-2026-115392 has a CVSS v3 base score of 7.9, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2026-115392?

CVE-2026-115392 affects 1 product, including: azl3 rpm-ostree 2024.4-11 on Azure Linux 3.0.

CVE-2026-115392HighCVSS 7.9

Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes

Vendor

Microsoft Security Response Center (MSRC)

Published

October 25, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-115392 →

🎯 Affected products1

azl3 rpm-ostree 2024.4-11 on Azure Linux 3.0

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-115392
referencehttps://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade