CVE-2026-89098Medium· 5.5▾ SunlitA flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malform…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.
nfs-utils (all versions)nfs-utilsnfs-utils (all versions)nfs-utils (all versions)nfs-utils (all versions)openshift/ose-rhel-coreos-8 (all versions)openshift/ose-rhel-coreos-9 (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89096Medium· 5.9Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd
CVE-2026-109240Low· 3.1FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RDP servers to crash clients by sending unvalidated OutputBufferSize values
CVE-2025-59530Medium· 5.3github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame (CVE-2025-59530)
CVE-2025-5455Medium· 5.3An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that cont…
CVE-2026-89085Medium· 6.6Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image
CVE-2026-89088Medium· 5.5Parted: parted: denial of service via heap buffer overflow during fat16 resize