CVE-2026-26446
High · 7.5CVSS
7.5
EPSS
—
Published
Aug 26, 2026
CISA due date
—
The record
Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closing the socket at specific points.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-80135 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-703
- CVE-2026-57445 Gardens v2 is a modular governance framework that enables communities to create and… CWE-703
- CVE-2026-82417 ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own… CWE-703
- CVE-2026-18638 Any authenticated Velociraptor user — including one holding only the readerrole — can… CWE-703
- CVE-2026-56818 Netty is an asynchronous, event-driven network application framework. CWE-703
- CVE-2026-20187 As part of Cisco's ongoing commitment to proactive security and product quality, the… CWE-703
- CVE-2026-51600 Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Content-Length header field in… CWE-703
- CVE-2026-13753 Certain HP DeskJet All-in-One printers may be potentially vulnerable to information… CWE-703