CVE-2026-76989

A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts an unknown function of the file source/src/enet_encap/encap.cc of the component TCP Encapsulation Receive Path. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is e8e9dba09bf56962807d3504b783ccdb6287f3e4. To fix this issue, it is recommended to deploy a patch.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
https://github.com/liftoff-sr/CIPster/
https://github.com/liftoff-sr/CIPster/commit/e8e9dba09bf56962807d3504b783ccdb6287f3e4
https://github.com/liftoff-sr/CIPster/issues/46
https://vuldb.com/cve/CVE-2026-76989
https://vuldb.com/submit/880112
https://vuldb.com/vuln/393612
https://vuldb.com/vuln/393612/cti

Configurations

No configuration.

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Se ha detectado una vulnerabilidad de seguridad en liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. Esto afecta a una función desconocida del archivo source/src/enet_encap/encap.cc del componente Ruta de Recepción de Encapsulación TCP. La manipulación conduce a una lectura fuera de límites. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado públicamente y puede ser utilizado. El identificador del parche es e8e9dba09bf56962807d3504b783ccdb6287f3e4. Para solucionar este problema, se recomienda desplegar un parche.

Information

Published : 2026-08-20 13:19

Updated : 2026-10-18 20:10

NVD link : CVE-2026-76989

Mitre link : CVE-2026-76989

CVE.ORG link : CVE-2026-76989

JSON object : View

Products Affected

No product.

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-125

Out-of-bounds Read

{"id": "CVE-2026-76989", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-76989", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-25T14:37:15.319006Z"}}], "cvssMetricV2": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.5, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "PROOF_OF_CONCEPT", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cna@vuldb.com", "affectedData": [{"cpes": ["cpe:2.3:a:liftoff-sr:cipster:*:*:*:*:*:*:*:*"], "vendor": "liftoff-sr", "modules": ["TCP Encapsulation Receive Path"], "product": "CIPster", "versions": [{"status": "affected", "version": "1802525be27d33e19a9a83c163e331a1d13b1892"}]}]}], "published": "2026-08-20T13:19:06.880", "references": [{"url": "https://github.com/liftoff-sr/CIPster/", "source": "cna@vuldb.com"}, {"url": "https://github.com/liftoff-sr/CIPster/commit/e8e9dba09bf56962807d3504b783ccdb6287f3e4", "source": "cna@vuldb.com"}, {"url": "https://github.com/liftoff-sr/CIPster/issues/46", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/cve/CVE-2026-76989", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/submit/880112", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/393612", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/393612/cti", "source": "cna@vuldb.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cna@vuldb.com", "description": [{"lang": "en", "value": "CWE-119"}, {"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts an unknown function of the file source/src/enet_encap/encap.cc of the component TCP Encapsulation Receive Path. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is e8e9dba09bf56962807d3504b783ccdb6287f3e4. To fix this issue, it is recommended to deploy a patch."}, {"lang": "es", "value": "Se ha detectado una vulnerabilidad de seguridad en liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. Esto afecta a una funci\u00f3n desconocida del archivo source/src/enet_encap/encap.cc del componente Ruta de Recepci\u00f3n de Encapsulaci\u00f3n TCP. La manipulaci\u00f3n conduce a una lectura fuera de l\u00edmites. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado p\u00fablicamente y puede ser utilizado. El identificador del parche es e8e9dba09bf56962807d3504b783ccdb6287f3e4. Para solucionar este problema, se recomienda desplegar un parche."}], "lastModified": "2026-10-18T20:10:00.110", "sourceIdentifier": "cna@vuldb.com"}