CVE-2026-102717

HighCVSS 7.5/10Last modified Sep 30, 2026

Description

MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125CWE-457

Affected software

No affected versions have been published.

Timeline

Published
Sep 30, 2026
Last modified
Sep 30, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-1027188.7hey, `_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon does not validate the claimed OID data length against the actual buffer CVE-2026-1027196.3Predictable DTLS HelloVerifyRequest Cookie in NetX SecureCVE-2026-102726.5A vulnerability has been found in a4m4 Student-Management-System up to f0c5f6842c5e8c431ff02b5260a565ca844df3a0. The impacted element is an CVE-2026-1027205.3A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received CVE-2026-1027216.9A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive patCVE-2026-1027226.9In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only covers the parse and thCVE-2026-1027236.0NULL Pointer Dereference on MSRP Attribute Table ExhaustionCVE-2026-1027246.0NULL Pointer Dereference When Evicting the Sole MSRP AttributeCVE-2026-1027256.0Out-of-bounds Read from Unvalidated MSRP Attribute List LengthCVE-2026-1027266.0Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds ReadCVE-2026-1027276.0FTP Passive Data Connection Not Bound to the Authenticated Control PeerCVE-2026-1027287.5Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is l
CVE-2026-102717: High severity, CVSS 7.5 | Vulnix