CVE-2026-18794
The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.47%
- CWE
- CWE-1288
- Published
- 2026-08-26
- Last modified
- 2026-08-26
Affected products
- CalcProgrammer1 OpenRGB
Weakness type
Related vulnerabilities
- CVE-2026-69793 — Windows TCP/IP Security Feature Bypass Vulnerability
- CVE-2026-18238 — OOBR in rpcap client in libpcap before 1.10.7
- CVE-2026-73219 — CVAT: Denial of service with regards to automatic annotation
- CVE-2026-18209 — Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution check
- CVE-2026-15943 — Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change
- CVE-2026-42982 — Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- CVE-2026-14781 — Keycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo email
- CVE-2026-9689 — Keycloak: org.keycloak.protocol.oidc: http parameter pollution in oidc redirect uri allows response parameter duplication - #ghi-604