CVE-2026-71971Suited to automated attack · CISA
U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly
CVSS score
8.8
EPSS probability
%0.4
Risk score
0.0
Published
13 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.8
CVE-2026-74221
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK
U
Patch verifiedEPSS %0
8.8
CVE-2026-74220
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply
U
Patch verifiedEPSS %0
8.8
CVE-2026-74222
U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback
U
Patch verifiedEPSS %0
7.1
CVE-2026-74225
U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6
U
Patch verifiedEPSS %0
6.0
CVE-2026-71972
U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder
U
Patch verifiedEPSS %0
5.2
CVE-2026-71973
U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation
U
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-71971"