CVE-2026-87734
Quick assessment
Affected
OCaml utcp
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 OCaml 的 utcp 包 0.0.6 之前的版本中发现了一个问题。乱序数据段的重组机制允许远程攻击者实施拒绝服务（DoS）攻击。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-87734
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
通信信道对预期端点的不适当限制
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-87734
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-87734
请登录查看更多情报信息。
Other References for CVE-2026-87734 (1)
Same Patch Batch · OCaml · 2026-09-09 · 7 CVEs total
| CVE-2026-87733 | 6.2 MEDIUM | OCaml mirage-crypto-ec 2.2.0前ECDSA签名伪造 |
| CVE-2026-87732 | 6.2 MEDIUM | OCaml mirage-crypto <2.2.0解密缓冲区信息泄露 |
| CVE-2026-87737 | 5.9 MEDIUM | mirage-crypto-ec 2.4.0前时序侧信道漏洞 |
| CVE-2026-57825 | 5.7 MEDIUM | OCaml opam 2.5.2前沙箱保护绕过漏洞 |
| CVE-2026-87736 | 4.3 MEDIUM | mirage-crypto-ec 2.3.0前 椭圆曲线公钥越界读取 |
| CVE-2026-87735 | 4.3 MEDIUM | ocaml mirage-crypto-pk<2.3.0 异常处理缺陷 |
IV. Related Vulnerabilities
Same weakness: CWE-923
-
CVE-2026-62836
Azure SQL Managed Instance Elevation of Privilege Vulnerabil -
CVE-2026-18655
Broker Credential and OAuth Token Disclosure in AWS Labs Ama -
CVE-2026-23904
Apache Kyuubi: Unrestricted access via Kyuubi engine-ui prox -
CVE-2026-63226
Ricoh printers and Multifunction Printers 授权问题漏洞 -
CVE-2026-8920
ASUS Aura Wallpaper Service 输入验证错误漏洞
V. Comments for CVE-2026-87734
No comments yet