EUVD-2026-66362Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network service with no access controls; impact is availability-only with no confidentiality or integrity loss.
Primary rating from Vendor (CNA).
CVSS VectorVendor
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2Description PRE-NVD
Articles & Coverage 1
AnalysisAI
Denial-of-service attack vectors in OpenRGB's unauthenticated TCP network protocol server (listening on 0.0.0.0:6742) allow any network-reachable attacker to crash or resource-exhaust the OpenRGB daemon without authentication. CVE-2026-18794 covers multiple DoS paths rooted in absent input-size validation - the server performs uncapped memory allocations from attacker-controlled length fields and passes raw network data to string constructors without null-termination checks. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The OpenRGB server must be running and TCP port 6742 must be reachable by the attacker - either over the network (if host or network firewall rules allow it) or via localhost (always accessible to any local user regardless of firewall). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVE-2026-18794 presents a meaningful real-world risk for any deployment where TCP port 6742 is network-reachable. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with access to TCP port 6742 - remotely if firewall rules permit, or locally via localhost - connects without any authentication and sends a crafted NetPacketHeader specifying a pkt_size value that drives an enormous or pathological memory allocation in the server's parsing loop. The OpenRGB daemon, running as root under 'Restart=always', crashes and is immediately restarted, enabling repeated cycling. … |
| Remediation | Upgrade to OpenRGB 1.0rc3-hotfix (Hotfix 1), which upstream states addresses the worst aspects of the flaws in this report; see https://openrgb.org for the release. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all systems running OpenRGB and classify by operational criticality, particularly any used for data center thermal management or security system integration. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today