SUSE PCRE2 JIT Vulnerability Patches Released for Multiple Systems

Linuxsecurity

SUSE PCRE2 JIT Vulnerability Patches Released for Multiple Systems

First seen 12 Nov 2026, 06:18 UTC • •57.1

Article Content

1 / 4

Browse articles

ThreatCluster •November 12, 2026 at 06:19 UTC

•CVE-2026-103111 allows out-of-bounds writes via JIT API misuse.
•Patches are available for SUSE Linux Enterprise Server, SUSE Linux Micro, and openSUSE.
•The vulnerability has a CVSS score of 7.6, indicating high severity.

A vulnerability (CVE-2026-103111) affecting the PCRE2 library has been identified, allowing an attacker to exploit an attacker-controlled regular expression and certain JIT API usage to perform an out-of-bounds write. This vulnerability impacts SUSE Linux Enterprise Server, SUSE Linux Micro, and openSUSE systems. Patches have been released for affected systems, including SUSE Linux Enterprise Server for SAP applications 16.0, SUSE Linux Micro 6.2, and openSUSE Leap 16.0. The CVSS score for this vulnerability is 7.6, indicating a high severity. Users are urged to apply the patches using the recommended installation methods. The vulnerability was published on September 30, 2026, and is currently not reported as in the wild.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 7h ago How this analysis works

Timeline

2026-09-30

CVE-2026-103111 published

The vulnerability affecting PCRE2 was publicly disclosed with a CVSS score of 7.6.

2026-11-04

Patches released for SUSE systems

SUSE released patches for the vulnerability affecting multiple versions of SUSE Linux and openSUSE.

2026-11-04

Patches released for openSUSE

openSUSE released patches addressing the same vulnerability in its systems.

More articles in this cluster (3)

Threat Graph

5 entities, 4 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Zero-day Exploit

Organization (1)

SuSE

Vulnerability (1)

CVE-2026-103111

Weakness (1)

CWE-787 - Out-of-bounds Write

Affected Platform (1)

SUSE Linux Micro

Relationships

CVE-2026-103111 targets SUSE Linux Micro
Zero-day Exploit targets SUSE Linux Micro
CVE-2026-103111 related to SuSE
CVE-2026-103111 related to CWE-787 - Out-of-bounds Write

Following this threat?

Track SuSE and CVE-2026-103111 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

Which systems are affected by CVE-2026-103111?

The vulnerability affects SUSE Linux Enterprise Server, SUSE Linux Micro, and openSUSE systems.

Is there any active exploitation reported for this vulnerability?

No, there are currently no reports of active exploitation in the wild.

How can I apply the patches?

Patches can be applied using YaST online_update or the 'zypper patch' command for your specific SUSE product.

Continue Reading

Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has…

Critical Code Injection Vulnerability in Staggs Plugin for WordPress A critical code injection vulnerability, CVE-2026-78287, has been identified in the Staggs plugin for WordPress, affecting versions up to 3.3.0. This flaw allows unauthenticated attackers to execute arbitrary code remotely, posing severe risks to affected sites. The vulnerability stems from improper control over code…