CVE-2026-26459: Ccoap vulnerability
Published Aug 27, 2026
·Updated
ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with insufficient option data.
Affected Software
1 affected component
ccoap
Event History
Aug 27, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:17 PM
Description
Frequently Asked Questions
1
What kind of traffic can trigger the crash?
Malformed COAP messages that contain insufficient option data can trigger a segmentation fault during option parsing.
2
What is the practical impact of successful exploitation?
The reported failure mode is a segmentation fault, which can cause the affected ccoap process to crash.
3
How can I determine whether an instance is potentially affected?
The affected revision identified in the report is ccoap commit 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. Compare your deployed source revision to that commit.