Vulnerability · Published Feb 3, 2026 · Assigned by alibaba

CVE-2026-1788Buffer Overflow in Xquic Server

Medium 6.6

In plain English

A medium-severity out-of-bounds write in Xquic Server from Xquic Project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).

Severity (CVSS 4.0)6.6Medium
Exploit odds (30 days)0.4%top 63.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

: Out-of-bounds Write vulnerability in Xquic Project Xquic Server xquic on Linux (QUIC protocol implementation, packet processing module modules) allows : Buffer Manipulation.This issue affects Xquic Server: through 1.8.3.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-1788
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-1788
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-1788
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-1788
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-1788
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-1788
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-1788
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-1788
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-1788
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-1788
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-1788
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-1788

Affected products (as reported)

VendorProductVersions
Xquic Project Xquic Server 0 – through 1.8.3

Weakness: CWE-787 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/RE:M/U:Amber

References