Vulnerability · Published Nov 3, 2026 · Assigned by GitLab

CVE-2026-121508Use After Free in µD3TN

Medium 5.9

In plain English

A medium-severity use-after-free in µD3TN from D3TN GmbH. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).

Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.4%top 68.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Use-After-Free in µD3TN BPv6 Fragmenter Cleanup allows Unauthenticated Remote Attacker to Cause DoS on Allocation Failure

Affected products (as reported)

VendorProductVersions
D3TN GmbH µD3TN 0 – before 0.15.2

Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References