CVE-2026-6328

Q: Is Xquic affected by CVE-2026-6328?

XQUIC library versions through 1.8.3 contain a signature verification bypass that allows unauthenticated network attackers to inject forged data into encrypted QUIC connections, potentially compromising the integrity of low-latency communication channels in affected applications.

EUVD-2026-22832 HIGH

2026-04-15 alibaba

Information Disclosure Xquic

8.3

CVSS 4.0

CVSS VectorNVD

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Lifecycle Timeline

Analysis Generated

Apr 15, 2026 - 12:37 vuln.today

DescriptionNVD

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux (QUIC protocol implementation, packet processing module, STREAM frame handler modules) allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3.

AnalysisAI

XQUIC library through version 1.8.3 on Linux permits signature verification bypass and protocol manipulation via crafted QUIC STREAM frames, allowing network attackers to inject forged data into encrypted QUIC connections. Exploitation requires high complexity network interception but needs no authentication (CVSS:4.0 AV:N/AC:H/PR:N). …

RemediationAI

Within 24 hours: Inventory all applications and infrastructure using XQUIC library and document current versions in use. Within 7 days: Contact application vendors for XQUIC dependency updates and evaluate GitHub commit 4764604a0e487eeb49338b4498aecda2194eae84 for patching feasibility; implement network segmentation to limit QUIC traffic exposure if immediate patching is not possible. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-6328 vulnerability details – vuln.today

Back