[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-14686":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T17:19:26.604Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":212,"aliases":222,"duplicate_of":9,"upstream":223,"downstream":224,"duplicates":233,"related":234,"reserved_at":9,"published_at":235,"modified_at":236,"state":237,"summary":238,"references_raw":246,"kevs":279,"epss":280,"epss_history":283,"metrics":285,"affected":302},"CVE-2026-14686","A vulnerability was found in HdrHistogram up to 2.2.2. This issue affects the function org.HdrHistogram.DoubleHistogram.recordValue of the file src/main/java/org/HdrHistogram/DoubleHistogram.java of the component Range Check. Performing a manipulation results in incorrect comparison. The attack is only possible with local access. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. This issue is disputed due to the potential lack of crossing of security boundaries and the pre-requisites for a successful attack.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-697","Incorrect Comparison","The product compares two entities in a security-relevant context, but the comparison is incorrect.","weakness","Incomplete","Pillar",[19,23,27,31,35,39,43,124,128,132,136,140,144,148,152,156,160,164,168,172,176,180,184,188,192,196,200,204,208],{"id":20,"name":21,"techniques":22},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":24,"name":25,"techniques":26},"CAPEC-120","Double Encoding",[],{"id":28,"name":29,"techniques":30},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":32,"name":33,"techniques":34},"CAPEC-15","Command Delimiters",[],{"id":36,"name":37,"techniques":38},"CAPEC-182","Flash Injection",[],{"id":40,"name":41,"techniques":42},"CAPEC-24","Filter Failure through Buffer Overflow",[],{"id":44,"name":45,"techniques":46},"CAPEC-267","Leverage Alternate Encoding",[47],{"id":48,"name":49,"tactics":50,"countermeasures":57},"T1027","Obfuscated Files or Information",[51,54],{"id":52,"name":53},"TA0030","Defense Evasion",{"id":55,"name":56},"TA0005","Stealth",[58,63,67,71,75,80,85,90,95,100,104,108,112,116,120],{"id":59,"name":60,"tactic":61},"D3-FA","File Analysis",{"name":62},"Detect",{"id":64,"name":65,"tactic":66},"D3-FIM","File Integrity Monitoring",{"name":62},{"id":68,"name":69,"tactic":70},"D3-DA","Dynamic Analysis",{"name":62},{"id":72,"name":73,"tactic":74},"D3-EFA","Emulated File Analysis",{"name":62},{"id":76,"name":77,"tactic":78},"D3-FEV","File Eviction",{"name":79},"Evict",{"id":81,"name":82,"tactic":83},"D3-DF","Decoy File",{"name":84},"Deceive",{"id":86,"name":87,"tactic":88},"D3-FE","File Encryption",{"name":89},"Harden",{"id":91,"name":92,"tactic":93},"D3-RF","Restore File",{"name":94},"Restore",{"id":96,"name":97,"tactic":98},"D3-CF","Content Filtering",{"name":99},"Isolate",{"id":101,"name":102,"tactic":103},"D3-LFP","Local File Permissions",{"name":99},{"id":105,"name":106,"tactic":107},"D3-RFAM","Remote File Access Mediation",{"name":99},{"id":109,"name":110,"tactic":111},"D3-CQ","Content Quarantine",{"name":99},{"id":113,"name":114,"tactic":115},"D3-CM","Content Modification",{"name":99},{"id":117,"name":118,"tactic":119},"D3-EAL","Executable Allowlisting",{"name":99},{"id":121,"name":122,"tactic":123},"D3-EDL","Executable Denylisting",{"name":99},{"id":125,"name":126,"techniques":127},"CAPEC-3","Using Leading 'Ghost' Character Sequences to Bypass Input Filters",[],{"id":129,"name":130,"techniques":131},"CAPEC-41","Using Meta-characters in E-mail Headers to Inject Malicious Payloads",[],{"id":133,"name":134,"techniques":135},"CAPEC-43","Exploiting Multiple Input Interpretation Layers",[],{"id":137,"name":138,"techniques":139},"CAPEC-44","Overflow Binary Resource File",[],{"id":141,"name":142,"techniques":143},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":145,"name":146,"techniques":147},"CAPEC-46","Overflow Variables and Tags",[],{"id":149,"name":150,"techniques":151},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],{"id":153,"name":154,"techniques":155},"CAPEC-52","Embedding NULL Bytes",[],{"id":157,"name":158,"techniques":159},"CAPEC-53","Postfix, Null Terminate, and Backslash",[],{"id":161,"name":162,"techniques":163},"CAPEC-6","Argument Injection",[],{"id":165,"name":166,"techniques":167},"CAPEC-64","Using Slashes and URL Encoding Combined to Bypass Validation Logic",[],{"id":169,"name":170,"techniques":171},"CAPEC-67","String Format Overflow in syslog()",[],{"id":173,"name":174,"techniques":175},"CAPEC-7","Blind SQL Injection",[],{"id":177,"name":178,"techniques":179},"CAPEC-71","Using Unicode Encoding to Bypass Validation Logic",[],{"id":181,"name":182,"techniques":183},"CAPEC-73","User-Controlled Filename",[],{"id":185,"name":186,"techniques":187},"CAPEC-78","Using Escaped Slashes in Alternate Encoding",[],{"id":189,"name":190,"techniques":191},"CAPEC-79","Using Slashes in Alternate Encoding",[],{"id":193,"name":194,"techniques":195},"CAPEC-8","Buffer Overflow in an API Call",[],{"id":197,"name":198,"techniques":199},"CAPEC-80","Using UTF-8 Encoding to Bypass Validation Logic",[],{"id":201,"name":202,"techniques":203},"CAPEC-88","OS Command Injection",[],{"id":205,"name":206,"techniques":207},"CAPEC-9","Buffer Overflow in Local Command-Line Utilities",[],{"id":209,"name":210,"techniques":211},"CAPEC-92","Forced Integer Overflow",[],[213],{"_key":214,"name":215,"source":216,"url":217,"maturity":218,"reliability_score":219,"verified":220,"type":9,"platforms":221,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_HDRHISTOGRAM_HDRHISTOGRAM","Hdrhistogram","github","https://github.com/HdrHistogram/HdrHistogram/issues/219","poc",0.3,false,[],[],[],[225,227,229,231],{"_key":226},"UBUNTU-CVE-2026-14686",{"_key":228},"RHSA-2026:26989",{"_key":230},"RHSA-2026:34975",{"_key":232},"DEBIAN-CVE-2026-14686",[],[],"2026-07-05T00:00:10.233Z","2026-07-16T07:18:14.216Z","PUBLISHED",{"cisa_kev":220,"cisa_ransomware":220,"cisa_vendor":9,"epss_severity":239,"epss_score":240,"severity":241,"severity_score":242,"severity_version":243,"severity_source":244,"severity_vector":245,"severity_status":237},"low",0.0024,"medium",4.8,"v4.0","cve.org","CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",[247,253,259,264,268,274],{"url":248,"sources":249,"tags":250},"https://vuldb.com/vuln/376282",[244],[251,252],"VDB Entry","Technical Description",{"url":254,"sources":255,"tags":256},"https://vuldb.com/vuln/376282/cti",[244],[257,258],"Signature","Permissions Required",{"url":260,"sources":261,"tags":262},"https://vuldb.com/cve/CVE-2026-14686",[244],[263],"Third Party Advisory",{"url":265,"sources":266,"tags":267},"https://vuldb.com/submit/846762",[244],[263],{"url":269,"sources":270,"tags":271},"https://github.com/HdrHistogram/HdrHistogram/issues/222",[244],[272,273],"Exploit","Issue Tracking",{"url":275,"sources":276,"tags":277},"https://github.com/HdrHistogram/HdrHistogram/",[244],[278],"Product",[],{"date":281,"score":240,"percentile":282},"2026-07-05",0.15027,[284],{"date":281,"score":240,"percentile":282},[286],{"source":244,"cvss_v2_0":287,"cvss_v3_0":292,"cvss_v3_1":298,"cvss_v4_0":300},{"baseScore":288,"baseSeverity":9,"vectorString":289,"impactScore":290,"exploitabilityScore":291},1.7,"AV:L/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR",2.9,3.1,{"baseScore":293,"baseSeverity":294,"vectorString":295,"impactScore":296,"exploitabilityScore":297},3.3,"LOW","CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",2.3,4.6,{"baseScore":293,"baseSeverity":294,"vectorString":299,"impactScore":296,"exploitabilityScore":297},"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",{"baseScore":242,"baseSeverity":301,"vectorString":245,"impactScore":9,"exploitabilityScore":9},"MEDIUM",[]]