sdwan-scanner-CVE-2026-20127

Cisco SD-WAN Exposure Scanner CVE-2026-20127 A specialized passive fingerprinting tool designed to identify internet-facing Cisco SD-WAN vManage / Viptela instances. This tool helps security researchers and system administrators manage their external attack surface by detecting potentially expose...

CVE-2026-20131-POC

CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20131 Exploited Since 2023 for Admin Access. This repository contains a working proof-of-concept exploit for CVE-2026-20131, a critical pre-authentication vulnerability in Cisco Catalyst SD-WAN Controller formerly vSmart and...

CVE-2026-63201

Netopeer2 is a server for implementing network configuration management based on the NETCONF Protocol. In affected versions, a low-privileged authenticated NETCONF user can remotely crash netopeer2-server by sending a get RPC with an invalid subtree filter whose text contains format specifiers. I...

CVE-2026-63201 netopeer2-server logging has format string vulnerability via subtree filter

Netopeer2 is a server for implementing network configuration management based on the NETCONF Protocol. In affected versions, a low-privileged authenticated NETCONF user can remotely crash netopeer2-server by sending a get RPC with an invalid subtree filter whose text contains format specifiers. I...

CVE-2026-63201

The Netopeer2 server, which implements the NETCONF protocol, is vulnerable to a Denial of Service (DoS) flaw. A low-privileged authenticated NETCONF user can remotely crash the netopeer2-server by sending a get RPC request containing an invalid subtree filter with format specifiers. The root caus...

CVE-2026-63201 netopeer2-server logging has format string vulnerability via subtree filter

Netopeer2 is a server for implementing network configuration management based on the NETCONF Protocol. In affected versions, a low-privileged authenticated NETCONF user can remotely crash netopeer2-server by sending a get RPC with an invalid subtree filter whose text contains format specifiers. I...

CVE-2026-63201 netopeer2-server logging has format string vulnerability via subtree filter

Netopeer2 is a server for implementing network configuration management based on the NETCONF Protocol. In affected versions, a low-privileged authenticated NETCONF user can remotely crash netopeer2-server by sending a get RPC with an invalid subtree filter whose text contains format specifiers. I...

EUVD-2026-114563

Netopeer2 is a server for implementing network configuration management based on the NETCONF Protocol. In affected versions, a low-privileged authenticated NETCONF user can remotely crash netopeer2-server by sending a get RPC with an invalid subtree filter whose text contains format specifiers. I...

PT-2026-134234

Name of the Vulnerable Software and Affected Versions Netopeer2 versions prior to 2.8.8 Description A low-privileged authenticated NETCONF user can remotely crash the netopeer2-server by sending a get RPC containing an invalid subtree filter with format specifiers. The issue occurs because np2srv...

CVE-2026-63201: CESNET netopeer2: Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol

Netopeer2 is a server for implementing network configuration management based on the NETCONF Protocol. In affected versions, a low-privileged authenticated NETCONF user can remotely crash netopeer2-server by sending a get RPC with an invalid subtree filter whose text contains format specifiers. I...

UBUNTU-CVE-2026-115327

libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxmlenvnetconfrpc in src/parserxml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via lydparseop to crash servers like netopeer2 or...

Linux Distros Unpatched Vulnerability : CVE-2026-115327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxmlenvnetconfrpc in src/parserxml.c when parsing NETCONF rpc action envelopes...

CVE-2026-115327

A flaw was found in libyang. An uninitialized pointer free vulnerability occurs during the processing of Network Configuration Protocol NETCONF Remote Procedure Call RPC action envelopes. An authenticated remote attacker with an established NETCONF session can trigger this flaw by sending a...

SUSE CVE-2026-115327

libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxmlenvnetconfrpc in src/parserxml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via lydparseop to crash servers like netopeer2 or...

CVE-2026-115327

libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxmlenvnetconfrpc in src/parserxml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via lydparseop to crash servers like netopeer2 or...

AZL-110492 CVE-2026-115327 affecting package libyang 2.1.148-3

libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxmlenvnetconfrpc in src/parserxml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via lydparseop to crash servers like netopeer2 or...

DEBIAN-CVE-2026-115327

libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxmlenvnetconfrpc in src/parserxml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via lydparseop to crash servers like netopeer2 or...

CVE-2026-115327

libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxmlenvnetconfrpc in src/parserxml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via lydparseop to crash servers like netopeer2 or...

EUVD-2026-108129

libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxmlenvnetconfrpc in src/parserxml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via lydparseop to crash servers like netopeer2 or...

CVE-2026-115327 libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser

libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxmlenvnetconfrpc in src/parserxml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via lydparseop to crash servers like netopeer2 or...