CVE-2026-74766 | PJCJ Net::IDN::Punycode up to 2.589 XS backend decode_punycode use after free

September 22, 2026 Yanac

A vulnerability has been found in PJCJ Net::IDN::Punycode up to 2.589 and classified as critical. This affects the function decode_punycode of the component XS backend. This manipulation causes use after free.

This vulnerability is registered as CVE-2026-74766. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More