CVE-2026-7164

Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a stack overflow and panic. Remote attackers can craft packets which cause affected systems to panic. This affects any system where pf is configured to process traffic, independent of the configured ruleset.

• CWE-674
• CWE-791

• https://security.freebsd.org/advisories/FreeBSD-SA-26:14.pf.ascVendor Advisory

Published

Apr 30, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-71620File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 al…8.1
• CVE-2026-71622SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 …7.4
• CVE-2026-71624An issue in esoTalk v.1.0.0g4 allows a remote attacker to ex…9.8
• CVE-2026-71625An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote att…9.8
• CVE-2026-71626An issue in Invoice Ninja v5.13.24 allows a remote attacker …7.5
• CVE-2026-7163A vulnerability in the assisted-service REST API, an optiona…5.5
• CVE-2026-71640An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to c…9.1
• CVE-2026-71641An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to c…7.5
• CVE-2026-71642An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to c…4
• CVE-2026-71643An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to c…7.5
• CVE-2026-71644An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested…9.8
• CVE-2026-71645An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested…7.5