CVE-2026-89096Medium· 5.9▾ SunlitA flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocat…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory growth. Sustained requests can exhaust system resources, eventually causing the service to degrade or crash.
nfs-utils (all versions)nfs-utilsnfs-utils (all versions)nfs-utils (all versions)nfs-utils (all versions)openshift/ose-rhel-coreos-8 (all versions)openshift/ose-rhel-coreos-9 (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89098Medium· 5.5Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd
CVE-2026-77205Low· 3.7Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache
CVE-2026-107885Low· 3.3OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs()
CVE-2026-107727Low· 3.7Strawberry GraphQL is a library for creating GraphQL APIs
CVE-2026-104031Medium· 5.5A flaw was found in SSSD
CVE-2026-104035Medium· 5.5A flaw was found in SSSD