CyberRota
← Ana sayfaya dön

CVE-2026-6862

MEDIUM · CVSS 5.5 EPSS %0.02 Public Exploit

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-04-22T14:17:08.060 · Çekilme zamanı: 2026-05-22T12:28:32.738949+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

Public Exploit Sinyali

Bu CVE için açıklama veya referanslarda public exploit / PoC / GitHub / Metasploit sinyali tespit edildi.

Tespit Edilen Sinyaller
exploit

Not: Bu bağlantılar yalnızca güvenlik araştırması ve doğrulama amacıyla listelenmiştir.

CVE
CVE-2026-6862
Severity
MEDIUM
CVSS
5.5
EPSS
%0.02

Orijinal NVD Açıklaması

A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node's Length field is at least 4 bytes, which is the minimum size for an EFI (Extensible Firmware Interface) device path node header. A local user could exploit this vulnerability by providing a specially crafted device path node. This can lead to infinite recursion, causing stack exhaustion and a process crash, resulting in a denial of service (DoS).