CVE-2026-76927

HighCVSS 7.5/10Last modified Aug 31, 2026

Description

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published
Aug 19, 2026
Last modified
Aug 31, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-769287.5X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of serviceCVE-2026-769295.5Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of serviceCVE-2026-76937.2The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insuffiCVE-2026-769316.4The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up CVE-2026-76947.3A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0. The impacted element is an uCVE-2026-769407.5The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This coulCVE-2026-769439.8Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended accessCVE-2026-769457.5The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay CVE-2026-769499.1Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who can plant a remember-me cookie in CVE-2026-76957.3A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This affects an unkCVE-2026-769567.5In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in beinCVE-2026-769577.8libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is simi
CVE-2026-76927: High severity, CVSS 7.5 | Vulnix