SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-23556

CRITICAL · CVSS 9.4 EPSS 0.14%

Source: NVD + CISA KEV + EPSS · Published 2026-07-09 · Last synced 2026-08-08

CyberRota Analysis

AI-Generated

The vulnerability occurs in oxenstored during the teardown of a domain, where usage counts are improperly leaked, potentially leading to incorrect quota enforcement for newly created domains. This can result in a situation where a reused domain ID is erroneously restricted, limiting the number of nodes it can create. Organizations utilizing oxenstored should prioritize addressing this issue to prevent potential disruptions in service and resource allocation.

CVE
CVE-2026-23556
Severity
CRITICAL
CVSS
9.4
EPSS
0.14%

Original NVD Description

When oxenstored is tearing a domain down, the node data is cleaned up but the usage counts are leaked. When the domain ID is eventually reused, the new domain can create fewer nodes before beeing deemed to be over quota.