CVE-2026-76987
Last modified
CVE-2026-76987 is a high-severity vulnerability rated 7.3/10 on the CVSS scale. A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element is the function CipAttribute::GetAttrData/CipAttribute::SetAttrData of the file ciptypes.h of the component Generic Attribute Logic. EPSS estimates a 0.53% chance of exploitation in the next 30 days.
Description
A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element is the function CipAttribute::GetAttrData/CipAttribute::SetAttrData of the file ciptypes.h of the component Generic Attribute Logic. Performing a manipulation results in memory corruption. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The patch is named e745d9d4a8ca3a13689066983a1269fe1e567674. It is suggested to install a patch to address this issue.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| liftoff-sr | CIPster | 1802525be27d33e19a9a83c163e331a1d13b1892 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-76987?
How severe is CVE-2026-76987?
How do I fix CVE-2026-76987?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-76980ZohoCorp ManageEngine OpManager and Firewall Analyzer versio…7.4
- CVE-2026-76982Improper neutralization of input during web page generation …5.4
- CVE-2026-76983Improper neutralization of input during web page generation …5.4
- CVE-2026-76984Improper neutralization of input during web page generation …5.4
- CVE-2026-76985Improper neutralization of input during web page generation …5.4
- CVE-2026-76986Improper neutralization of input during web page generation …6.1
- CVE-2026-76988A weakness has been identified in liftoff-sr CIPster 1802525…5.3
- CVE-2026-76989A security vulnerability has been detected in liftoff-sr CIP…5.3
- CVE-2026-7699A security flaw has been discovered in Dromara MaxKey up to …6.3
- CVE-2026-76990A vulnerability has been found in code-projects Simple Inven…7.3
- CVE-2026-76991A vulnerability was found in itsourcecode Hospital Managemen…6.3
- CVE-2026-76992The CODESYS Gateway Client allocates memory based on a size …7.5
Are you affected by CVE-2026-76987?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST