CVE-2026-103577
High · 7.5CVSS
7.5
EPSS
0.6%
Published
Oct 13, 2026
CISA due date
—
The record
Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-109828 A vulnerability was found in libsndfile up to 1.2.2. CWE-453
- CVE-2026-92950 vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows… CWE-453
- CVE-2026-41330 OpenClaw before 2026.3.31 contains an environment variable override vulnerability in host… CWE-453
- GHSA-9gp8-hjxr-6f34 OpenClaw: Host exec environment overrides miss proxy, TLS, Docker, and Git TLS controls CWE-453