CVE-2026-34858

CVE-2026-34858 is a use-after-free (UAF) vulnerability in the communication module that impacts product availability. The vulnerability requires local access to exploit, high privilege escalation, and difficult attack conditions, resulting in a CVSS v3.1 base score of 4.1 (MEDIUM severity). Attack success is limited to availability impacts with no confidentiality or integrity compromise. The vulnerability demonstrates minimal exploitation activity, with an EPSS score of 0.000060 indicating very low probability of real-world exploitation and no public exploit code availability documented. The vulnerability is not listed on the CISA Known Exploited Vulnerabilities catalog and shows no active threat community attention, suggesting this remains a low-priority remediation concern relative to higher-severity threats in the current threat landscape.