Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-84833

CVE-2026-84833LOW

ntegrals openbrowser Browser Agent Message Construction agent.ts resource consumption

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   P   N   N   L    2.1   .0051   41.4     —

AFFECTED
  Product      Versions                                    Fixed
  openbrowser  067fc45d649baa961750da8e2f4a75d87c5c75c8 –  —

TIMELINE
  Sep 2   Reserved by VulDB
  Sep 2   Published (CNA: VulDB)
  Sep 3   EXPLOIT PUBLISHED — CVE-2026-84833 (ntegrals openbrowser). Public exploit reference added.

CWE-400, CWE-404 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

Description

A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unknown functionality of the file packages/core/src/agent/agent.ts of the component Browser Agent Message Construction. Performing a manipulation results in resource consumption. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
September 2, 2026	Reserved	Reserved by VulDB
September 2, 2026	Published	Published (CNA: VulDB)
September 3, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2026-84833 (ntegrals openbrowser). Public exploit reference added.

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
ntegrals	openbrowser	—	067fc45d649baa961750da8e2f4a75d87c5c75c8	—

Weaknesses

CWE-400 · CWE-404

References (5)

Authoritative record: CVE-2026-84833 at cve.org

Vendors: ntegrals

Weaknesses: CWE-400 · CWE-404

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-84833 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.