CVE-2026-63201

A flaw was found in Netopeer2. This vulnerability allows an authenticated remote user to cause a Denial of Service DoS by sending a crafted get Remote Procedure Call RPC message containing format specifiers in an invalid filter. When processing the request, the server passes the unvalidated input...

CVE-2026-63201

Netopeer2 is a server for implementing network configuration management based on the NETCONF Protocol. In affected versions, a low-privileged authenticated NETCONF user can remotely crash netopeer2-server by sending a get RPC with an invalid subtree filter whose text contains format specifiers. I...

CVE-2026-63201

The Netopeer2 server, which implements the NETCONF protocol, is vulnerable to a Denial of Service (DoS) flaw. A low-privileged authenticated NETCONF user can remotely crash the netopeer2-server by sending a get RPC request containing an invalid subtree filter with format specifiers. The root caus...

CVE-2026-63201 netopeer2-server logging has format string vulnerability via subtree filter

Netopeer2 is a server for implementing network configuration management based on the NETCONF Protocol. In affected versions, a low-privileged authenticated NETCONF user can remotely crash netopeer2-server by sending a get RPC with an invalid subtree filter whose text contains format specifiers. I...

CVE-2026-63201: CESNET netopeer2: Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol

Netopeer2 is a server for implementing network configuration management based on the NETCONF Protocol. In affected versions, a low-privileged authenticated NETCONF user can remotely crash netopeer2-server by sending a get RPC with an invalid subtree filter whose text contains format specifiers. I...

Important: libyang security update

The libyang package provides a library for YANG data modeling language. libyang is a YANG data modelling language parser and toolkit written and providing API in C. The library is used e.g. in libnetconf2, Netopeer2, sysrepo and FRRouting projects. Security Fixes: libyang: stack-based buffer...