CVE-2026-7378

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-122

Affected software

No affected versions have been published.

Timeline

Published
Apr 30, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-737808.3A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRFCVE-2026-737818.4A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site CVE-2026-737828.8A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. SucceCVE-2026-737834.9Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cCVE-2026-737848.8A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate aCVE-2026-737857.5A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denialCVE-2026-737867.5A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service CVE-2026-737877.2A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable systeCVE-2026-737886.5A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable CVE-2026-737895.3A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attackCVE-2026-73797.5Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCVE-2026-737908.2A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.
CVE-2026-7378: High severity, CVSS 7.5 | Vulnix