SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-15422

CRITICAL · CVSS 9.1 EPSS 0.51% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-16 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the illumos SCTP inbound path, which improperly validates address parameters in INIT ACK chunks during association lookup, leading to potential out-of-bounds access and kernel heap corruption. This flaw allows remote, unauthenticated attackers to exploit the vulnerability, potentially resulting in remote code execution. Organizations using affected illumos distributions should prioritize patching to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-15422
Severity
CRITICAL
CVSS
9.1
EPSS
0.51%

Original NVD Description

The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk. Since this lookup runs during packet classification (i.e. before SCTP integrity checks or IPsec policy are applied) a remote, unauthenticated attacker can send a crafted SCTP INIT ACK packet with malformed address parameters to cause an out-of-bounds access and kernel heap corruption, which may lead to remote code execution. The flaw has existed since 2010 (illumos-gate commit a5407c02), and affects any illumos distribution prior to illumos-gate commit 53a3efde.