EUVD-2026-75288
GHSA-j54j-r8q7-v2hq
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Network-reachable AMQP listener with no auth required, but crafting the recursive payload requires protocol knowledge (AC:H); impact is availability-only.
Primary rating from Vendor (redhat).
CVSS VectorVendor: redhat
Lifecycle Timeline
1DescriptionCVE.org
A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure communication between distributed services. The issue occurs when the router processes a specially crafted network message using its AMQP field parser. Due to a lack of bounds on recursion during parsing, the router can run out of stack memory and crash, leading to a denial of service for the interconnected network.
AnalysisAI
Uncontrolled recursion in Red Hat Service Interconnect 2's skupper-router AMQP field parser allows a remote unauthenticated attacker to crash the router by sending a specially crafted network message, resulting in denial of service for all services relying on the interconnected network. The vulnerability stems from an absent recursion depth limit during AMQP message parsing, causing stack memory exhaustion. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The target skupper-router instance must be reachable over the network on its AMQP listener port. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) reflects a moderate-severity DoS with no confidentiality or integrity impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-88763 and apply the patched version of Red Hat Service Interconnect 2 once released; no specific fixed version number was available in the provided input. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-674 – Uncontrolled Recursion
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today