VULNERABILITY INTELLIGENCE
CVE-2026-6328
CVSS score8.3 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-04-15
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
Description
Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux (QUIC protocol implementation, packet processing module, STREAM frame handler modules) allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3.
Weakness classification
- CWE-20: Improper Input Validation
- CWE-347: Improper Verification of Cryptographic Signature