CVE-2026-86040Suited to automated attack · CISA
libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS
CVSS score
7.5
EPSS probability
%0.7
Risk score
0.1
Published
28 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.5
CVE-2026-103936
libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners
L
Patch status unknown
7.5
CVE-2023-39533
libp2p nodes vulnerable to attack using large RSA keys
L
Patch verifiedEPSS %2
7.5
CVE-2026-89146
libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses
L
Patch status unknownEPSS %1
7.5
CVE-2026-77384
libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustion
L
Patch status unknownEPSS %1
7.5
CVE-2026-73568
py-libp2p: yamux connection DoS via oversized data frame
L
Patch status unknownEPSS %0
8.2
CVE-2026-61544
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
L
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-86040"