What is the CVSS score of EUVD-2026-15196?

EUVD-2026-15196 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Kea are affected by EUVD-2026-15196?

A high-severity vulnerability in ISC Kea DHCP server (CVE-2026-3608) could allow attackers to remotely disable critical DHCP infrastructure without authentication, preventing network connectivity for…. A patch is available.

How to fix or mitigate EUVD-2026-15196?

Within 24 hours: Identify all systems running vulnerable Kea DHCP versions and isolate them from untrusted network segments if possible; verify patch availability for your environment. Within 7 days: Test and deploy the vendor patch in a staging environment to validate compatibility with existing configurations. Within 30 days: Complete production deployment of patched Kea versions across all affected DHCP infrastructure and verify normal operation through monitoring and health checks.

Kea EUVD-2026-15196

| CVE-2026-3608 HIGH

Reachable Assertion (CWE-617)

2026-03-25 isc

GHSA-8xcr-6f99-hm7w

Buffer Overflow Kea

7.5

CVSS 3.1 · Vendor: isc

Severity by source

Vendor (isc) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Ubuntu

MEDIUM

qualitative

SUSE

HIGH

qualitative

Red Hat

7.5 HIGH

qualitative

Primary rating from Vendor (isc).

CVSS VectorVendor: isc

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 25, 2026 - 09:00 euvd

EUVD-2026-15196

Analysis Generated

Mar 25, 2026 - 09:00 vuln.today

Patch released

Mar 25, 2026 - 09:00 nvd

Patch available

CVE Published

Mar 25, 2026 - 08:46 nvd

HIGH 7.5

DescriptionCVE.org

Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.

AnalysisAI

Denial of service in Kea DHCP daemons (versions 2.6.0-2.6.4 and 3.0.0-3.0.2) allows unauthenticated remote attackers to crash affected services by sending maliciously crafted messages to API sockets or HA listeners, triggering a stack overflow. Vulnerable Kea installations across Ubuntu, Red Hat, SUSE, and Debian are susceptible to service interruption attacks with no authentication required. A patch is available for affected distributions.

Technical ContextAI

ISC Kea is an open-source DHCP server implementation designed as a modern replacement for ISC DHCP. The affected product (cpe:2.3:a:isc:kea) provides critical network services including IPv4 and IPv6 address assignment, dynamic DNS updates, and control agent functionality. This vulnerability is classified as CWE-617 (Reachable Assertion), which occurs when an attacker can trigger an assertion failure in the code, though the description indicates stack overflow behavior. The vulnerability manifests in the API endpoints and high availability listeners of multiple Kea daemons, where improper input validation or resource allocation allows a specially crafted message to exhaust stack memory and trigger daemon termination. The network-accessible attack surface includes control APIs typically used for administrative operations and HA synchronization between Kea instances.

RemediationAI

Upgrade ISC Kea to version 2.6.5 or 3.0.3 or later depending on your deployment branch. Patched versions are available from the official ISC download site at https://downloads.isc.org/isc/kea/2.6.5 for the 2.6.x branch and https://downloads.isc.org/isc/kea/3.0.3 for the 3.0.x branch. Refer to the vendor security advisory at https://kb.isc.org/docs/cve-2026-3608 for detailed upgrade instructions. Until patching can be completed, implement network-level access controls to restrict API socket and HA listener access to only trusted administrative hosts and networks, and consider deploying monitoring to detect abnormal daemon restarts that could indicate exploitation attempts. Deploy redundant Kea instances in high availability configuration if not already implemented to maintain service continuity during potential attacks.

More in Kea

View all

CVE-2015-8373 MEDIUM This Month

6.8 Dec 22

The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow rem

CVE-2019-6474 MEDIUM This Month

6.5 Oct 16

A missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage c

CVE-2019-6473 MEDIUM This Month

6.5 Oct 16

An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process (kea-dhcp4), causing the se

CVE-2019-6472 MEDIUM This Month

6.5 Oct 16

A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an assertion fai

Same weakness CWE-617 – Reachable Assertion

View all

CVE-2016-8864 HIGH

7.5

CVE-2020-12417 HIGH POC

8.8

CVE-2020-6623 HIGH POC

8.8

CVE-2020-6619 HIGH POC

8.8

CVE-2020-6617 HIGH POC

8.8

CVE-2023-37023 HIGH POC

8.6

CVE-2023-37021 HIGH POC

8.6

CVE-2023-37020 HIGH POC

8.6

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2017-11882 HIGH POC

7.8

CVE-2010-3333 HIGH POC

7.8

Vendor StatusVendor

Ubuntu

Priority: Medium

isc-kea

Release	Status	Version
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
jammy	needs-triage	-
noble	needs-triage	-
questing	needs-triage	-
upstream	released	3.0.3,2.6.5

Debian

isc-kea

Release	Status	Fixed Version	Urgency
bookworm	vulnerable	2.2.0-6	-
trixie	vulnerable	2.6.3-1	-
forky	vulnerable	3.0.2-3	-
sid	fixed	3.0.3-1	-
(unstable)	fixed	3.0.3-1	-

SUSE

Severity: High

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7	Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP7	Fixed
SUSE Linux Enterprise Module for Server Applications 15 SP7	Fixed
SUSE Linux Enterprise Server 15 SP7	Fixed

EUVD-2026-15196 vulnerability details – vuln.today

Back

SUSE Linux Enterprise Server 16.0	Fixed
SUSE Linux Enterprise Server 16.1	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP7	Fixed
SUSE Linux Enterprise Server for SAP applications 16.0	Fixed
SUSE Linux Enterprise Server for SAP applications 16.1	Fixed
openSUSE Leap 15.6	Fixed
SUSE Linux Enterprise Module for Server Applications 15 SP6	Fixed
SUSE Linux Enterprise Server 15 SP6	Fixed
SUSE Linux Enterprise Server 15 SP6-LTSS	Fixed
SUSE Linux Enterprise Server for SAP Applications 15 SP6	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP6	Fixed

Kea EUVD-2026-15196

Severity by source

CVSS VectorVendor: isc

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Kea

Same weakness CWE-617 – Reachable Assertion

Same technique Buffer Overflow

Vendor StatusVendor

Ubuntu

Debian

SUSE

Share

External POC / Exploit Code