CVE-2026-54086

5.3 MEDIUMpublic exploit available

Published 2026-10-13 · Updated 2026-10-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing an unauthenticated client of the SLE listening service to trigger exceptions, resource leakage, and denial of service. This issue is fixed in version 5.1.7.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weaknesses

CWE-770

Public exploit & PoC references

https://github.com/esa/sleapi-j/commit/265118dfb70d1d0d991b085dcde4028c60bce4fc
https://github.com/esa/sleapi-j/releases/tag/5.1.7
https://github.com/esa/sleapi-j/security/advisories/GHSA-6g75-jwgj-hj8v

All references

https://github.com/esa/sleapi-j/commit/265118dfb70d1d0d991b085dcde4028c60bce4fc
https://github.com/esa/sleapi-j/releases/tag/5.1.7
https://github.com/esa/sleapi-j/security/advisories/GHSA-6g75-jwgj-hj8v

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2023-54404PoC
MEDIUMCVE-2025-12767
UNSCOREDCVE-2025-8352
MEDIUMCVE-2026-100274
MEDIUMCVE-2026-100350PoC
MEDIUMCVE-2026-100508
MEDIUMCVE-2026-100600PoC
LOWCVE-2026-100649PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.