CVE-2026-97686— VxWorks 7 Memory Resource leak
Quick assessment
Affected
Wind River VxWorks 7
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Wind River VxWorks 7 26.09 版本之前，特定的系统调用参数可能导致 IPNET 子系统在终止调用应用程序之前，未能正确释放已分配的 kernel 内存和系统文件描述符。该问题已在 26.09 版本中修复。 安全研究人员：Zhi Yang Bingren Wu 发现
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Wind River | VxWorks 7 | VxWorks 7 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-97686
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
VxWorks 7 Memory Resource leak
Source: CVE Program / CVE List V5
Vulnerability Description
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对已超过有效生命周期的资源丧失索引
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Wind River | VxWorks 7 | VxWorks 7 | - |
|
II. Public POCs for CVE-2026-97686
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-97686
请登录查看更多情报信息。
Other References for CVE-2026-97686 (1)
IV. Related Vulnerabilities
Same weakness: CWE-772
-
CVE-2026-79677
Apache Tomcat: WebSocket DoS due to lost asynchronous write -
CVE-2026-94625
vLLM through 0.29.0 Resource Exhaustion via Ownerless Moonca -
CVE-2026-92983
InternLM LMDeploy through 0.17.0 Memory Exhaustion via Sessi -
CVE-2026-20250
Cisco Secure Firewall Adaptive Security Appliance and Secure -
CVE-2026-72931
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Se
V. Comments for CVE-2026-97686
No comments yet