VulnerabilityAnalyzed

CVE-2026-32854

MEDIUM 6.3EPSS 5.32%

Does this matter?

Lower severity and a low EPSS score (5.32%). Track it; it rarely justifies an emergency change on its own.

Description

LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c that allow remote attackers to cause a denial of service by sending specially crafted HTTP requests. Attackers can exploit missing validation of strchr() return values in the CONNECT and GET proxy handling paths to trigger null pointer dereferences and crash the server when httpd and proxy features are enabled.

CVSS 4.0: 6.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 5.32% probability · 92th percentile
CISA KEV: Not listed
Weakness: CWE-476
Affected: libvncserver project/libvncserver
Source: disclosure@vulncheck.com

References

https://github.com/LibVNC/libvncserver/commit/dc78dee51a7e270e537a541a17befdf2073f5314Patch
https://github.com/LibVNC/libvncserver/security/advisories/GHSA-xjp8-4qqv-5x4xExploit, Vendor Advisory
https://www.vulncheck.com/advisories/libvncserver-httpd-proxy-null-pointer-dereferenceThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.