CVE-2026-6918 - Vulnerability Analysis
HighCVSS: 7.5Last Updated: May 5, 2026
Eclipse Open9J - Denial of Service
Published: May 5, 2026Updated: May 5, 2026PoC AvailableRemote Exploitable
Overview
Eclipse Open9J 0.21 to 0.58 contains a denial of service caused by a crafted 32-byte TCP message crashing JITServer, letting pre-authentication remote attackers crash the service, exploit requires network access.
Severity & Score
Severity: High
CVSS Score: 7.5
Impact
Remote attackers can crash JITServer, causing denial of service.
Mitigation
Update to the latest version beyond 0.58.
References
Related Resources
Details
- CVE ID
- CVE-2026-6918
- Severity
- High
- CVSS Score
- 7.5
- Type
- denial_of_service
- Status
- confirmed
CWE
- CWE-125
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H