SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-18313

MEDIUM · CVSS 4.3 EPSS 0.21% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-05 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability affects the rpcapd service, which fails to properly manage memory allocation for incoming RPCAP_MSG_UPDATEFILTER_REQ and RPCAP_MSG_STARTCAP_REQ messages, leading to memory leaks. This can result in degraded performance and potential denial of service as the server's memory is consumed over time, especially when exploited by a malicious client. Organizations utilizing rpcapd should prioritize addressing this issue to mitigate the risk of service disruption.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-18313
Severity
MEDIUM
CVSS
4.3
EPSS
0.21%

Original NVD Description

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.