ZeroDay Findings
Sign inSign up

Findings

CVE-2026-0708

A flaw was found in libucl.

Published Mar 17, 2026 · updated Jun 17, 2026 · vstakhov libucl

A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the function when parsing and emitting the object, leading to a Denial of Service (DoS) for the affected system.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 17, 2026 · NIST NVD

    Detected

    A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the function when parsing and emitting the object, leading to a Denial of Service (DoS) for the affected system.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the function when parsing and emitting the object, leading to a Denial of Service (DoS) for the affected system.

Affected

  • cpe vstakhov/libuclversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-0708

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-0708

    A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the function when p

    nvd.nist.gov

References