CVE-2026-72712Disclosure

LOWCVSS 6.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-835

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-26: 108-26
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • NotCVE@notCVE
    Disclosure

    🎯 A NotCVE became a CVE NotCVE-2026-0011 — registered 2026-07-28, no CVE assigned at the time. CVE-2026-72712 — published 14 days later. The record was there from day one — public and timestamped. Details → https://notcve.org/notcve/NotCVE-2026-0011 https://t.co/I4tqTVIk26

    Post summary

    The tweet reports that a previously unassigned NotCVE was officially recognized as a CVE after a public, timestamped record was set, linking to the NotCVE details.

    0000045
    68 followersView on X

Explore more