CVE-2026-5264

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Heap buffer overflow in DTLS 1.3 ACK message processing. A remote attacker can send a crafted DTLS 1.3 ACK message that triggers a heap buffer overflow.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

No affected versions have been published.

Timeline

Published: Apr 9, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-52656.5When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICM CVE-2026-526569.8An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C and before allows an attacker to execute a CVE-2026-52662.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo. This vulnerability is associated wi CVE-2026-52677.5Ciena Navigator Network Control Suite (NCS) contains an information exposure vulnerability in an event-streaming API that does not properly CVE-2026-526736.5SQL Injection vulnerability in Cboard v.0.4.2 and before allows a remote attacker to execute arbitrary code via the getDimensionsValues comp CVE-2026-52689.1An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerabi CVE-2026-526809.8Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. CVE-2026-526813.1Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly CVE-2026-526843.7If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happ CVE-2026-526863.7The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are accepted without signature validation when CVE-2026-526876.5An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression state requires a large CVE-2026-526887.5RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation