CVE-2026-107838 | RIOT-OS RIOT up to 2026.07 Fileserver fileserver.c _resp_init payload_len initialization

October 9, 2026 Yanac

A vulnerability was found in RIOT-OS RIOT up to 2026.07. It has been rated as critical. This affects the function _resp_init of the file sys/net/application_layer/nanocoap/fileserver.c of the component Fileserver. Performing a manipulation of the argument payload_len results in improper initialization.

This vulnerability is cataloged as CVE-2026-107838. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More