CVE-2026-115327

The libyang library (versions through 6.4.13 ) is vulnerable to an uninitialized pointer free vulnerability within the lydxml_env_netconf_rpc() function located in src/parser_xml.c. This issue occurs during the parsing of NETCONF RPC action envelopes . An attacker with an established NETCONF sess...