CVE-2026-71884
Packet CTR reports a full success length after the counter is exhausted
CVSS score
8.2
EPSS probability
%0.4
Risk score
0.0
Published
6 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.9
CVE-2026-5598
Non-constant time comparisons risk private key leakage in FrodoKEM.
LO
Patch verifiedEPSS %1
8.7
CVE-2026-3505
Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.
LO
Patch verifiedEPSS %1
8.7
CVE-2026-58060
HSS public-key level count unbounded, enabling huge allocation on verify
LO
Patch verifiedEPSS %1
8.7
CVE-2026-59646
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
LO
Patch verifiedEPSS %1
6.3
CVE-2026-5588
PKIX draft CompositeVerifier accepts empty signature sequence as valid.
LO
Patch verifiedEPSS %1
8.7
CVE-2026-58059
Quadratic-time escaping when stringifying X.500 distinguished names
LO
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-71884"