EUVD-2026-38070
Stack-based Buffer Overflow (CWE-121)
N/A
vendor:alpine
7.7
CVSS 4.0 · Vendor: vendor:alpine
Share
Severity by source
Vendor (vendor:alpine)
PRIMARY
7.7
HIGH
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (vendor:alpine) · only source for this CVE.
CVSS VectorVendor: vendor:alpine
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
X
Lifecycle Timeline
2
Patch available
Jun 19, 2026 - 21:02 EUVD
Analysis Generated
May 30, 2026 - 12:11 vuln.today
DescriptionCVE.org
Alpine Linux: radvd fixed in 2.21-r0
AnalysisAI
radvd (Router Advertisement Daemon) on Alpine Linux was patched in package version 2.21-r0 to address an unspecified vulnerability tracked as CVE-2026-48715. The nature of the flaw - its root cause, exploitability, and potential impact - is not disclosed in the available intelligence. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Access
Identify host running vulnerable radvd
Exploit
Deliver crafted network or local input
Execution
Trigger undisclosed flaw in radvd
Impact
Achieve unknown impact
Access
Identify host running vulnerable radvd
Exploit
Deliver crafted network or local input
Execution
Trigger undisclosed flaw in radvd
Impact
Achieve unknown impact
Vulnerability AssessmentAI
| Exploitation | Exploitation conditions cannot be determined from available data. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Risk assessment is severely constrained by data scarcity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Without a vulnerability description, CVSS vector, or CWE, a grounded exploit scenario cannot be constructed. In a plausible but speculative model consistent with radvd's role: a network-adjacent attacker on an IPv6-enabled segment could send a crafted Router Solicitation or malformed ICMPv6 packet to a host running a vulnerable radvd instance, triggering the flaw and achieving an unknown impact. … |
| Remediation | The vendor-released patch is Alpine Linux package radvd version 2.21-r0. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).