Threadlinqs IntelligenceStart free

VulnerabilityCVE-2026-41948

CVE-2026-41948

As of 2026-10-20, CVE-2026-41948 is a vulnerability. Threadlinqs Intelligence links 1 tracked threat campaign to CVE-2026-41948, most recently “Q2 2026 Vulnerability and Exploit Landscape: Exploited AI-platform flaws (OpenClaw CVE-2026-25253, Dify CVE-2026-41948, Open WebUI CVE-2026-45386), Exchange CVE-2026-45501, and Linux kernel page-cache LPE exploit wave (Copy Fail, Dirty Frag)”.

CVSS
—Not yet scored
EPSS
—No EPSS score yet
CISA KEV
NoNot in the KEV catalog
Tracked threats
1Campaigns referencing it

Last updated:

What is CVE-2026-41948?

CVE-2026-41948 vulnerability details.

No weakness class, CVSS vector or affected-product list has been recorded for CVE-2026-41948 beyond the description above.

Severity and exploitation probability

CISA KEV
Not listed in the CISA Known Exploited Vulnerabilities catalog

Is CVE-2026-41948 being exploited?

It currently carries a trending score of 5 in the Threadlinqs vulnerability feed.

Affected products and versions

No affected-product or package list has been recorded for CVE-2026-41948 in the tracked sources. The vendor advisory and the references below are the authoritative statement of what is affected.

How to fix CVE-2026-41948

No vendor patch reference has been recorded for CVE-2026-41948 in the tracked sources. Watch the CNA record and the vendor advisory channel for a fix, and treat any affected deployment as exposed until the vendor states otherwise.

Threat activity tracking CVE-2026-41948

1 tracked threat in the Threadlinqs corpus references CVE-2026-41948, either in the campaign’s CVE list or as an indicator on the campaign record.

Sources

Seeded from threat-derived and not yet processed by the Threadlinqs enrichment pipeline, so blank CVSS, EPSS or KEV fields above mean NOT MEASURED rather than measured-absent.

No external references are recorded on this row.