CVE-2026-26447

Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap use-after-free during StompClient destruction, causing the broker process to crash. An unauthenticated client can exploit this to reliably trigger a denial of service.

• CWE-416

• https://github.com/mdoi/stomper
• https://github.com/songxpu/bug_report/blob/master/Stomp/stomper_vuln3.md
• https://github.com/songxpu/bug_report/blob/master/Stomp/stomper_vuln3.md

Published

Aug 26, 2026

Last Modified

Aug 28, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-26418Missing authentication and authorization in the web API of T…7.5
• CVE-2026-2642A security vulnerability has been detected in ggreer the_sil…3.3
• CVE-2026-26422clash-verge-service-ipc before 2.3.0 has a world-reachable I…8.4
• CVE-2026-2644A weakness has been identified in niklasso minisat up to 2.2…7.8
• CVE-2026-26445stomper 5e2741e is vulnerable to Denial of Service. A malici…7.5
• CVE-2026-26446Stomper 5e2741e is vulnerable to Denial of Service. When a b…7.5
• CVE-2026-26448Stomper 5e2741e is vulnerable to Use-After-Free. When a clie…9.8
• CVE-2026-26449In Stomper 5e2741e when a client sends a SEND frame missing …7.5
• CVE-2026-2645In wolfSSL 5.8.2 and earlier, a logic flaw existed in the TL…7.5
• CVE-2026-26452ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a v…7.5
• CVE-2026-26453ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a nu…7.5
• CVE-2026-26456A null pointer dereference vulnerability exists in the serve…7.5