CVE-2026-0708 - Vulnerability Analysis

Overview

libucl contains a denial of service caused by a specially crafted UCL input with an embedded null byte in a key, letting remote attackers cause a segmentation fault in ucl_object_emit, exploit requires crafted input.

Severity & Score

Impact

Remote attackers can cause a segmentation fault leading to denial of service and system crash.

Mitigation

Update to the latest version of libucl.

References

• https://access.redhat.com/security/cve/CVE-2026-0708
• https://bugzilla.redhat.com/show_bug.cgi?id=2427770
• https://github.com/vstakhov/libucl/issues/323

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner