{"id":"CVE-2026-128886","aliases":["EUVD-2026-125785","GHSA-9v3j-p9g2-48j8"],"status":"published","title":"Dbus: server accept watch can be stalled by blocking nonce-tcp accept_with_noncefile path","description":"A flaw was found in dbus when configured with the nonce-tcp transport. An unauthenticated attacker able to connect to an exposed listener can cause a Denial of Service (DoS) by opening a connection and withholding the expected authentication token. Because the server processes this verification without enforcing a timeout, the stalled connection blocks the accept process and prevents legitimate clients from establishing new connections.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1322"],"published":"2026-11-13T21:42:20.482Z","modified":"2026-11-14T00:31:45Z","products":[{"vendor":"red hat","product":"red hat enterprise linux 10"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-128886","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2472930","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-128886"},{"url":"https://github.com/advisories/GHSA-9v3j-p9g2-48j8"}],"sources":{"cve":[{"id":"CVE-2026-128886","title":"Dbus: server accept watch can be stalled by blocking nonce-tcp accept_with_noncefile path","description":"A flaw was found in dbus when configured with the nonce-tcp transport. An unauthenticated attacker able to connect to an exposed listener can cause a Denial of Service (DoS) by opening a connection and withholding the expected authentication token. Because the server processes this verification without enforcing a timeout, the stalled connection blocks the accept process and prevents legitimate clients from establishing new connections.","status":"published","published":"2026-11-13T21:42:20.482Z","modified":"2026-11-13T21:42:20.482Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-1322"],"updated_at":"2026-11-13T22:36:58.333409Z"}],"euvd":[{"id":"EUVD-2026-125785","description":"A flaw was found in dbus when configured with the nonce-tcp transport. An unauthenticated attacker able to connect to an exposed listener can cause a Denial of Service (DoS) by opening a connection and withholding the expected authentication token. Because the server processes this verification without enforcing a timeout, the stalled connection blocks the accept process and prevents legitimate clients from establishing new connections.","status":"published","published":"2026-11-14T00:31:44Z","modified":"2026-11-14T00:31:44Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-14T01:42:05.230204Z"}],"ghsa":[{"id":"GHSA-9v3j-p9g2-48j8","title":"A flaw was found in dbus when configured with the nonce-tcp transport. An unauthenticated...","description":"A flaw was found in dbus when configured with the nonce-tcp transport. An unauthenticated attacker able to connect to an exposed listener can cause a Denial of Service (DoS) by opening a connection and withholding the expected authentication token. Because the server processes this verification without enforcing a timeout, the stalled connection blocks the accept process and prevents legitimate clients from establishing new connections.","status":"published","published":"2026-11-14T00:31:44Z","modified":"2026-11-14T00:31:45Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-1322"],"updated_at":"2026-11-14T00:56:48.734103Z"}],"nvd":[{"id":"CVE-2026-128886","description":"A flaw was found in dbus when configured with the nonce-tcp transport. An unauthenticated attacker able to connect to an exposed listener can cause a Denial of Service (DoS) by opening a connection and withholding the expected authentication token. Because the server processes this verification without enforcing a timeout, the stalled connection blocks the accept process and prevents legitimate clients from establishing new connections.","status":"published","published":"2026-11-13T22:17:23.657Z","modified":"2026-11-13T22:17:23.767Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-1322"],"updated_at":"2026-11-13T23:38:08.103555Z"}]}}