P5 Verified
Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport
CVE-2026-103764. EPSS 0.00636 (percentile 0.48693), scored 2026-10-03. Fixed version: e5598b0992cc258b06d22f24d875480e8931a28e. Fixed version: a2933849417259e562fc9cbad63c618d464dfb2d.
- CVE / CWE
- CVE-2026-103764 /
- Vendor / product
- Unavailable / Unavailable
- Severity
- 0.2
- CVSS
- Unavailable · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N · osv
- EPSS
- 0.00636 · percentile 0.48693 · 2026-10-03
- KEV
- no · added unavailable · due unavailable · ransomware use unavailable
- Exploit signals
- Signal evidence
Affected products
- Product unavailable · Fixed version: e5598b0992cc258b06d22f24d875480e8931a28e
- Product unavailable · Fixed version: a2933849417259e562fc9cbad63c618d464dfb2d
Provenance
- OSV.dev · Source record · observed 2026-10-04 08:10:59.885464+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-103764.html