SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-18743

LOW · CVSS 2.5 EPSS 0.14% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-01 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A vulnerability exists in the popt library, allowing attackers to exploit a memory corruption issue through specially crafted configuration content. This flaw can lead to heap metadata corruption, potentially resulting in a denial of service for affected processes. Organizations utilizing the popt library should prioritize addressing this vulnerability to mitigate the risk of service disruptions.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-18743
Severity
LOW
CVSS
2.5
EPSS
0.14%

Original NVD Description

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).