CVE-2016-9928

PoC ×2—

CVSS 3.1

7.4 high

EPSS

5%p91

Published

Feb 6, 2020 (Feb 6, 2020)

Modified

Jun 17, 2026

Description

MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets.

Vendors: mcabber canonical debian
Products: mcabber, ubuntu linux, debian linux
Weakness: CWE-269
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (4.5%)

In the news0 stories

No ingested article mentions this CVE yet.