CVE-2026-26453

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coapserverhandlesession function when processing COAP messages containing URIPATH options with NULL data pointers. When the server searches for a URIPATH option matching the string "separate", ...

CVE-2026-26453

ccoap (commit 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 ) is affected by a null pointer dereference in the coap_server_handle_session() function. When processing COAP messages containing URI_PATH options, the server calls strncmp() on option_list[i].data to check for the string "separate" without ...