SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-6554

MEDIUM · CVSS 5.5 EPSS 0.10% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-05 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The libpcap BPF interpreter is vulnerable due to improper handling of the 'ja L' instruction, which allows for infinite loops when processing crafted filter programs. This can lead to denial of service conditions, as the interpreter may become unresponsive during excessive looping. Network administrators and developers utilizing libpcap in their applications should prioritize addressing this vulnerability to mitigate potential service disruptions.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-6554
Severity
MEDIUM
CVSS
5.5
EPSS
0.10%

Original NVD Description

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely.