CVE-2026-87724Patch

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) because of corrupted congestion-control state. This is TROVE-2026-032.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-669

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Full discourse1 post

Bussio28Team 🌐 Ciberseguridad práctica@Bussio28Team45d
Patch
Tor publica hoy CVE-2026-87724, un fallo que puede provocar la caída del servicio de forma remota. ¿Qué significa? Que un atacante podría afectar la disponibilidad del servicio sin necesidad de autenticarse. ¿Por qué importa? Porque en infraestructuras que dependen de Tor, una caída también puede convertirse en un problema operativo. ¿Qué haría yo? Revisar versión y actualizar a Tor 0.4.9.12 cuanto antes. #Ciberseguridad #Tor #Vulnerabilidad
Post summary
The post announces CVE‑2026‑87724 as a remote DoS vulnerability in Tor and urges users to upgrade to version 0.4.9.12 for protection.
0000049
133 followersView on X

Explore more

Back to dashboard