CVE-2026-64860

ESP-Protocols is a collection of protocol components for ESP-IDF. Prior to mDNS version 1.11.2, the `mdns` component follows DNS name-compression pointers recursively when parsing fully qualified domain names (FQDNs) in inbound mDNS packets without capping pointer-follow depth in `mdns_utils_read_fqdn()`. An unauthenticated attacker on the same link-local network can send a crafted packet to UDP port 5353 on an `ESP-IDF` device using `espressif/mdns` with mDNS enabled. Deep recursion exhausts the fixed-size stack of the mDNS FreeRTOS task, causing a controlled panic and reboot; persistent malicious traffic can cause a crash loop. No confidentiality or integrity impact has been demonstrated, and remote code execution is not claimed. This issue is fixed in mDNS version 1.11.2.

• CWE-400
• CWE-674

• https://github.com/espressif/esp-protocols/commit/95c882c7d7d661d28d4685bd052b024154a8402f
• https://github.com/espressif/esp-protocols/releases/tag/mdns-v1.11.2
• https://github.com/espressif/esp-protocols/security/advisories/GHSA-7fpr-vjw5-2c86

Published

Oct 30, 2026

Last Modified

Nov 5, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-64851Grav Shortcode Core Plugin allows for the development shortc…8.5
• CVE-2026-64852Grav API Plugin is a RESTful API for Grav CMS that provides …8.7
• CVE-2026-64856FileRise is a self-hosted web-based file manager with multi-…3.7
• CVE-2026-64857tirreno, a security framework, has a session fixation issue …5.3
• CVE-2026-64859New API is a large language mode (LLM) gateway and artificia…9.1
• CVE-2026-6486A vulnerability was detected in classroombookings up to 2.17…3.5
• CVE-2026-64862Frappe HR is an open-source human resources management solut…6.5
• CVE-2026-64863goshs is a feature-rich single-binary file server for red te…9.1
• CVE-2026-64865New API is a large language mode (LLM) gateway and artificia…6
• CVE-2026-64866New API is a large language mode (LLM) gateway and artificia…5.1
• CVE-2026-64868New API is a large language mode (LLM) gateway and artificia…7.5
• CVE-2026-6487A flaw has been found in Qihui jtbc5 CMS 5.0.3.6. Affected i…4.3