CVE-2026-97152

— UNSCOREDpublic exploit available

Published 2026-09-24 · Updated 2026-09-24

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf.

Weaknesses

CWE-122

Public exploit & PoC references

https://github.com/nanomsg/nanomsg/pull/1130
https://github.com/nanomsg/nanomsg/releases/tag/1.2.3

All references

https://github.com/nanomsg/nanomsg/pull/1130
https://github.com/nanomsg/nanomsg/releases/tag/1.2.3
https://nanomsg.org

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2016-15059PoC
CRITICALCVE-2017-20241
LOWCVE-2025-1218PoC
CRITICALCVE-2026-102331
HIGHCVE-2026-10575
HIGHCVE-2026-10744
CRITICALCVE-2026-10747
CRITICALCVE-2026-10858

Related by shared AI tags and CWE weakness class. Browse the full archive.