CVE-2026-102992: piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env

Overview

Severity

N/A

Exploit Status

Not Exploited

Patch Tuesday

2026-Sep

Released

2026-10-03

EPSS Score

0.43% (percentile: 35.5%)

Affected Products (1)

Other

• 19693-17084

Revision History

• 2026-10-03: Information published.