---
id: CVE-2026-77568
title: 'Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER'
summary: >-
  Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs:
  CVE-2026-15747. Reason: This candidate is a duplicate of CVE-2026-15747.
  Notes: All CVE users should reference CVE-2026-15747 instead of this
  candidate.
severity: medium
cvss: 4.2
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N'
cwe:
  - CWE-200
  - CWE-352
vendor: mojolicious
product: mojo
affected:
  - mojo < 9.48
published: '2026-09-18'
updated: '2026-09-21'
sourceUpdated: '2026-09-21T18:17:10.830'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-77568'
references:
  - url: >-
      https://github.com/mojolicious/mojo/commit/01921fbbbbeca2d1397e082d4a647f9b84c24e27
    label: security-advisories@github.com
  - url: >-
      https://github.com/mojolicious/mojo/security/advisories/GHSA-cf46-h6jw-mj3r
    label: security-advisories@github.com
tags:
  - nvd
  - cve.org
epss: 0.00098
epssPercentile: 0.00874
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-18T17:24:07.686715Z'
cvssSource: nvd
ingestedAt: '2026-09-18T16:45:41.391Z'
---

## Overview

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-15747. Reason: This candidate is a duplicate of CVE-2026-15747. Notes: All CVE users should reference CVE-2026-15747 instead of this candidate.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.