CVE-2026-28662 | defend.network

What is CVE-2026-28662?

In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSSawaiting NVD

ExploitationNo exploitation reported

Triage statusUnder Review

ActionSchedule for next cycle

NVD published2026-09-08

NVD last modified2026-09-08

Timeline

2026-09-08Published to the U.S. National Vulnerability Database (NVD)
2026-09-10First covered in a defend.network daily briefing

Affected product

See advisory

References

Referenced in our briefings & reports

Cisco FMC actively exploited; BlueMoon exploit kit chains Chrome & Windows; AI tokens bypass MFA (2026-09-10)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.

What is CVE-2026-28662?

Timeline

Affected product

References

Referenced in our briefings & reports

Get Critical CVE Alerts