CVE-2026-89146Proof of concept (PoC) published · CISASuited to automated attack · CISA
libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses
CVSS score
7.5
EPSS probability
%0.6
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.5
CVE-2026-103936
libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners
L
Patch status unknown
7.5
CVE-2023-39533
libp2p nodes vulnerable to attack using large RSA keys
L
Patch verifiedEPSS %2
7.5
CVE-2026-86040
libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS
L
Patch status unknownEPSS %1
7.5
CVE-2026-77384
libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustion
L
Patch status unknownEPSS %1
7.5
CVE-2026-73568
py-libp2p: yamux connection DoS via oversized data frame
L
Patch status unknownEPSS %0
8.2
CVE-2026-61544
libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
L
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-89146"