CVE-2026-63388 is a vulnerability in the Libevent event notification library affecting versions prior to 2.1.13 and 2.2.2-a. The vulnerability has a CVSS 3.1 base score of 8.4, with attack vector local, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. Multiple Ubuntu-specific stable versions of Libevent are affected. There is no information on available patches or vendor advisories in the provided data.

The vulnerability allows an attacker with local access to potentially compromise confidentiality, integrity, and availability of the affected system. The high CVSS score reflects the critical nature of the impact if exploited. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for unusual activity related to Libevent usage.