CVE-2024-5564High· 8.1▾ TwilightA vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
1.2%
A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.
libndp >= 1.0 < 1.7-7libndp (all versions)libndp (all versions)libndp (all versions)libndp (all versions)libndp (all versions)libndp (all versions)libndp (all versions)libndp (all versions)libndp (all versions)libndp (all versions)libndp (all versions)libndp (all versions)libndp (all versions)libndp (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Currently there is no mitigation available for this vulnerability. Please make sure to update as the fixes become available.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-123037Medium· 6.7Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
CVE-2026-121837Medium· 4.3Quarkus-rest-data-panache: quarkus-rest-data-panache: getter-level @securefield ignored for filter and sort
CVE-2026-109081Medium· 6.8Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpoint
CVE-2026-107124Medium· 6.4Keycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeover
CVE-2026-96447Medium· 4.2Keycloak-services: keycloak-services: stateless token preferred_username fallback enables identity rebinding
CVE-2026-19688Medium· 6.8Keycloak-services: keycloak-services: admin api missing audience check