SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-76987

HIGH · CVSS 7.3 EPSS 0.31% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-20 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

A vulnerability in the Generic Attribute Logic of liftoff-sr CIPster allows for remote memory corruption through manipulation of the CipAttribute::GetAttrData and CipAttribute::SetAttrData functions. This high-severity flaw poses significant risks, as it can be exploited by attackers to compromise system integrity. Organizations using affected products should prioritize applying the available patch to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-76987
Severity
HIGH
CVSS
7.3
EPSS
0.31%

Original NVD Description

A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element is the function CipAttribute::GetAttrData/CipAttribute::SetAttrData of the file ciptypes.h of the component Generic Attribute Logic. Performing a manipulation results in memory corruption. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The patch is named e745d9d4a8ca3a13689066983a1269fe1e567674. It is suggested to install a patch to address this issue.