Vulnerability · Published Sep 23, 2026 · Assigned by ASR
CVE-2026-42801Deference after null check in as_rrc
High 7.4
In plain English
A high-severity null pointer dereference in Crane，Falcon from ASR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS 3.1)7.4High
Exploit odds (30 days)0.3%top 79.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ASR | Crane，Falcon | see references |
Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L