BaselineWatch
Desk

CVE-2026-35505

8.7 high SSVC exploitation: none Deferred

An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows until the service is killed and the port stops responding until restart.

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Change history 1

  1. First seenCVSS 8.7NVD modified 2026-10-25 21:10

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 3