Vulnerability · Published Aug 20, 2026 · Assigned by VulDB

CVE-2026-76989liftoff-sr CIPster TCP Encapsulation Receive Path encap.cc out-of-bounds

Medium 5.3

In plain English

A medium-severity out-of-bounds read in CIPster from liftoff-sr. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.7%top 45.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts an unknown function of the file source/src/enet_encap/encap.cc of the component TCP Encapsulation Receive Path. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is e8e9dba09bf56962807d3504b783ccdb6287f3e4. To fix this issue, it is recommended to deploy a patch.

Affected products (as reported)

Vendor	Product	Versions
liftoff-sr	CIPster	1802525be27d33e19a9a83c163e331a1d13b1892

Weakness: CWE-125, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

References

VDB-393612 | liftoff-sr CIPster TCP Encapsulation Receive Path encap.cc out-of-bounds vdb-entry
VDB-393612 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-76989 | CVE Analysis and Report third-party-advisory
Submit #880112 | liftoff-sr CIPster master before e8e9dba (reproduced on 1802525be27d33e19a9a83c163e331a1d13b1892) Out-of-bounds Read third-party-advisory
https://github.com/liftoff-sr/CIPster/issues/46 exploit, issue-tracking
https://github.com/liftoff-sr/CIPster/commit/e8e9dba09bf56962807d3504b783ccdb6287f3e4 patch
https://github.com/liftoff-sr/CIPster/ product