MEDIUMCVSS v3.1 6.2Vulnerability

CVE-2026-128987

A flaw was found in dbus. A local attacker can exploit this vulnerability by connecting to an affected service, requesting a response, and stopping socket reads while keeping the connection open. Because the socket transport handles broken pipe write errors as retryable, the application enters a continuous retry loop. This can lead to excessive CPU consumption, resulting in a denial of service (DoS) for the target process.

Properties

Severity
MEDIUM
Nvd fetched at
2026-11-14T00:40:25.638091+00:00
Cvss severity
MEDIUM
Cvss score
6.2
Retrieved at
2026-11-14T00:50:05+00:00
Score
6.2
Cvss version
3.1
Last source
NVD
Cve id
CVE-2026-128987
Cvss vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
First seen by Signal
2026-11-14T00:50:05+00:00
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published at
2026-11-13T21:17:45.977
Last modified
2026-11-13T21:17:46.090

Related Entities (1)

HAS_WEAKNESS (1)

Related research

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-128987 (CVSS v3.1 6.2) — Ninja Signal Threat Intelligence | Ninja Signal