CVE-2026-44932

—

CVSS 3.1

8.8 high

EPSS

<1%p29

Published

Jun 16, 2026 (Jun 16, 2026)

Modified

Jun 18, 2026

Description

Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine.

Weakness: CWE-78
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.