SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-26446

HIGH · CVSS 7.5 EPSS 0.34% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-26 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

Stomper 5e2741e is susceptible to a Denial of Service vulnerability that occurs when a broker sends data to a client with a closed TCP connection, causing the server process to terminate due to a SIGPIPE signal. This issue can be exploited by any unauthenticated client, leading to service interruptions. Organizations using this software should prioritize remediation to prevent potential disruptions in service availability.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-26446
Severity
HIGH
CVSS
7.5
EPSS
0.34%

Original NVD Description

Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closing the socket at specific points.