CVE-2026-0708 - Vulnerability Analysis

Overview

libucl contains a denial of service caused by a specially crafted UCL input with an embedded null byte in a key, letting remote attackers cause a segmentation fault in ucl_object_emit, exploit requires crafted input.

Severity & Score

Impact

Remote attackers can cause a segmentation fault leading to denial of service and system crash.

Mitigation

Update to the latest version of libucl.

References

• https://access.redhat.com/security/cve/CVE-2026-0708
• https://bugzilla.redhat.com/show_bug.cgi?id=2427770
• https://github.com/vstakhov/libucl/issues/323

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 17, 2026

🟠 CVE-2026-0708 - High (8.3) A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0708/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner