PatchTheCVEreactor core vulnerabilities and fixes
Recent CVEs affecting reactor core, with upgrade or downgrade steps. 2 tracked.
Also searched as: reactorcore.
reactor core has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-08-27. Highest priority: CVE-2026-47863 (score 34/100).
- CVE-2026-47857 MEDIUM 5.9 UPGRADE In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulne
- CVE-2026-47863 MEDIUM 5.9 UPGRADE In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulne
FAQ
How do I fix reactor core vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is reactor core being exploited right now?
None of the tracked reactor core CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which reactor core CVE should I patch first?
CVE-2026-47863 currently ranks highest (34/100): In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulne.