CVE-2026-68911
— UNSCOREDpublic exploit availablePublished 2026-09-29 · Updated 2026-09-29
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version 3.3.11.
Weaknesses
CWE-409
Public exploit & PoC references
- https://github.com/nicotine-plus/nicotine-plus/commit/61de347fbaaab02eae1606df4f95d9dc17066d4c
- https://github.com/nicotine-plus/nicotine-plus/pull/3646
- https://github.com/nicotine-plus/nicotine-plus/releases/tag/3.3.11
- https://github.com/nicotine-plus/nicotine-plus/security/advisories/GHSA-8w4c-p7mj-g886
All references
- https://github.com/nicotine-plus/nicotine-plus/commit/61de347fbaaab02eae1606df4f95d9dc17066d4c
- https://github.com/nicotine-plus/nicotine-plus/pull/3646
- https://github.com/nicotine-plus/nicotine-plus/releases/tag/3.3.11
- https://github.com/nicotine-plus/nicotine-plus/security/advisories/GHSA-8w4c-p7mj-g886
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-47321
- HIGHCVE-2026-63452PoC
- MEDIUMCVE-2026-65827PoC
- UNSCOREDCVE-2026-67232PoC
- UNSCOREDCVE-2026-77021
- MEDIUMCVE-2026-77528PoC
- UNSCOREDCVE-2026-77620PoC
- HIGHCVE-2026-83599PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.