VULNERABILITY INTELLIGENCE

CVE-2026-85231

CVSS score6.5 MEDIUM

EPSS probability0.21%

CISA KEVNot currently listed

Published2026-10-16

Last modified2026-10-30

Description

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lea…