SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-65421

MEDIUM · CVSS 6.5 EPSS 0.18% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-30 · Last synced 2026-08-29

CyberRota Analysis

AI-Generated

The vulnerability in the MMS BER decoder allows an attacker to exploit an unvalidated length value, resulting in a read past the end of a heap buffer. This flaw can cause the termination of the MMS service process, leading to a denial-of-service condition. Organizations utilizing MMS services should prioritize addressing this vulnerability to prevent potential service disruptions.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-65421
Severity
MEDIUM
CVSS
6.5
EPSS
0.18%

Original NVD Description

The MMS BER decoder contains a flaw in decoding fixed-width BER fields (boolean/integer): an attacker-supplied length value is not validated, causing a read past the end of a heap buffer. This leads to termination of the MMS service process and a denial-of-service condition.