CVE-2026-87726
Last modified
CVE-2026-87726 is a low-severity vulnerability rated 3.9/10 on the CVSS scale. Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software versions from 07.18.00 onwards have fixed this problem.. EPSS estimates a 0.10% chance of exploitation in the next 30 days.
Description
Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software versions from 07.18.00 onwards have fixed this problem.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| NXP | NxpNfcRdLib | >= RC663, < 07.18.00 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-87726?
How severe is CVE-2026-87726?
How do I fix CVE-2026-87726?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-8772A weakness has been identified in linlinjava litemall up to …4.7
- CVE-2026-87720Incorrect Authorization (CWE-863) in project name normalizat…7.6
- CVE-2026-87721Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the…8.7
- CVE-2026-87722Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in re…8.7
- CVE-2026-87723In Google fuse-archive versions prior to 1.24, an attacker w…5.4
- CVE-2026-87724Tor before 0.4.9.12 interprets the CC_RESPONSE extension eve…6.5
- CVE-2026-87727a-blog cms Ver. 3.2.33 and earlier contains a path traversal…6.9
- CVE-2026-8773A security vulnerability has been detected in linlinjava lit…4.7
- CVE-2026-87730Rejected reason: this is rejected
- CVE-2026-87732An issue was discovered in the mirage-crypto package before …6.2
- CVE-2026-87733An issue was discovered in the mirage-crypto-ec function bef…6.2
- CVE-2026-87734An issue was discovered in the utcp package before 0.0.6 for…7.5
Are you affected by CVE-2026-87726?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST