HIGHCVSS v3.1 7.5Vulnerability

CVE-2026-101303

The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address. A process in a classic (non-VNET) jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail network isolation.

Properties

Severity
HIGH
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.00363
Cvss severity
HIGH
Cvss score
7.5
Retrieved at
2026-10-21T01:24:48+00:00
Last source
FIRST EPSS
Score
7.5
Cvss version
3.1
Cve id
CVE-2026-101303
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
First seen by Signal
2026-10-18T13:39:03+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Published at
2026-10-15T07:17:57.437
Last modified
2026-10-20T00:17:27.083
Epss percentile
0.287

Related Entities (30 · showing 21)

AFFECTS_PRODUCT (29 · showing 20)

→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p5:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.1:p2:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p6:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.1:p3:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p4:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p8:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.1:p1:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.1:-:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p7:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p9:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p11:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:14.4:p4:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p12:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:14.4:p7:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:-:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p13:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p1:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:15.0:p2:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:14.4:p6:*:*:*:*:*:*
→[Product]cpe:2.3:o:freebsd:freebsd:14.4:p8:*:*:*:*:*:*

HAS_WEAKNESS (1)

→[Weakness]Incorrectly Specified Destination in a Communication Channel

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-101303 (CVSS v3.1 7.5) — Ninja Signal Threat Intelligence | Ninja Signal