CVE-2026-63379 is a vulnerability in the Libevent library affecting versions prior to 2.1.13 and 2.2.2-a, including multiple stable versions used in Ubuntu LTS releases. The CVSS 4.0 vector indicates the vulnerability can be exploited remotely without privileges or user interaction, with low complexity and partial attack type, resulting in low confidentiality and integrity impact. The vulnerability affects specific stable versions such as 2.0.21-stable and 2.1.8-stable through 2.1.12-stable builds. There is no explicit vendor advisory or patch information provided, and no known exploits in the wild have been reported.

The vulnerability allows remote attackers to exploit Libevent without requiring privileges or user interaction, potentially leading to partial impact on confidentiality and integrity. The overall severity is medium, indicating a moderate risk but no critical or high impact consequences have been documented. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official fixes are confirmed, users should monitor vendor channels for updates and consider upgrading to versions 2.1.13 or later or 2.2.2-a or later once confirmed safe.