Threats Tagged 'cve-2026-13217'
View all threats tagged with 'cve-2026-13217'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-13217'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-13217 is a memory-safety vulnerability in the Zephyr project's OCPP 1.6 client. It involves improper handling of server-supplied uid strings in the ocpp_process_server_msg() function, leading to a NULL pointer dereference when parsing malformed uid values. This can cause a remote denial of service on platforms that trap NULL pointer accesses. The vulnerability is triggered by network data from a malicious or compromised OCPP central system or a man-in-the-middle on non-TLS connections. The fix partially addresses the issue but does not fully guard against all NULL dereferences in the parsing logic. Join the discussion | CVE Database V5 | 08/25/2026, 16:05:38 UTC Added: 08/25/2026, 16:22:53 UTC |
Showing 1 to 1 of 1 result