Your RSA-2048 keys break in 2030. Find every one of them before attackers do.
CISA KEV·Added 2024-06-26 — agencies required to remediate by 2024-07-17

CVE-2022-2586

HIGH
Published
Jan 8, 2024
Updated
Apr 16, 2026
Affected
0 pkgs
Patched
None yet
Exploits
6 known

EPSS Exploitation Probability

via FIRST.org ↗
2.7%probability of exploitation in next 30 days
Lower Risk86th percentile-0.07%
1.54%2.74%3.94%5.15%3.9%2.7%Dec 25Apr 26Jun 26

EPSS (Exploit Prediction Scoring System) is a daily probability model maintained by FIRST.org. It estimates the likelihood a CVE will be exploited in production environments within the next 30 days, derived from real-world threat intelligence signals.

Description

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

Exploits & PoCs
6

Research use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.

Frequently Asked Questions

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
O3 Security · Impact-Aware SCA

Is CVE-2022-2586 in your stack?

O3 detects CVE-2022-2586 across dependencies and uses function-level reachability to confirm whether the vulnerable code path is actually reachable — not just present. No false positives.