Vulnerability · Published Aug 20, 2026 · Assigned by VulDB

CVE-2026-76987liftoff-sr CIPster Generic Attribute Logic ciptypes.h SetAttrData memory corruption

High 7.3

In plain English

A high-severity memory corruption in CIPster from liftoff-sr. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.5%top 55.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element is the function CipAttribute::GetAttrData/CipAttribute::SetAttrData of the file ciptypes.h of the component Generic Attribute Logic. Performing a manipulation results in memory corruption. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The patch is named e745d9d4a8ca3a13689066983a1269fe1e567674. It is suggested to install a patch to address this issue.

Affected products (as reported)

Vendor	Product	Versions
liftoff-sr	CIPster	1802525be27d33e19a9a83c163e331a1d13b1892

Weakness: CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References

VDB-393610 | liftoff-sr CIPster Generic Attribute Logic ciptypes.h SetAttrData memory corruption vdb-entry, technical-description
VDB-393610 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-76987 | CVE Analysis and Report third-party-advisory
Submit #880100 | liftoff-sr CIPster master branch (reproduced on 1802525be27d33e19a9a83c163e331a1d13b1892) Out-of-bounds Read/Write third-party-advisory
https://github.com/liftoff-sr/CIPster/issues/47 exploit, issue-tracking
https://github.com/liftoff-sr/CIPster/commit/e745d9d4a8ca3a13689066983a1269fe1e567674 patch
https://github.com/liftoff-sr/CIPster/ product