ECHO-8EAE-A1AE-5790 The one-byte over-read is in the POWER8-optimised strncasecmp (GLIBC-SA-2026-0024). Echo builds glibc exclusively for amd64 and arm64, whose strncasecmp implementations are separate and unaffected, so the vulnerable code is not compiled into any shipped package. https://security-tracker.debian.org/tracker/CVE-2026-97399
| Reporter | Title | Published | Views | Family All 132 |
|---|---|---|---|---|
 | CVE-2026-97399 | 7 Oct 202604:42 | – | circl |
 | CVE-2026-97399 | 28 Sep 202615:21 | – | cve |
 | CVE-2026-97399 One-byte overread in strncasecmp on Power8 | 28 Sep 202615:21 | – | cvelist |
 | CVE-2026-97399 | 28 Sep 202615:21 | – | debiancve |
 | EUVD-2026-88320 | 28 Sep 202615:21 | – | euvd |
 | CVE-2026-97399 | 28 Sep 202615:21 | – | mend |
 | One-byte overread in strncasecmp on Power8 | 30 Sep 202608:02 | – | mscve |
 | CVE-2026-97399 | 28 Sep 202616:17 | – | nvd |
 | AZL-104976 CVE-2026-97399 affecting package glibc 2.38-21 | 28 Sep 202616:17 | – | osv_azl |
 | CGA-2G6Q-52XC-QFWV | 3 Oct 202601:10 | – | osv_cga |
10
| Source | Link |
|---|---|
| advisory | www.advisory.echohq.com/cve/CVE-2026-97399 |
| advisory | www.advisory.echohq.com/cve/CVE-2026-97399 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
29 Sep 2026 11:45Current
5.6Medium risk
Vulners AI Score5.6
CVSS 3.13.7
EPSS0.00292
SSVC