Threat Investigation
Request a demo

CVE-2026-53689

High

Description

libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfs_zdr_string in lib/libnfs-zdr.c.

SeverityHigh
CVSS7.1
Exploit probability—
ProductSahlberg Libnfs
PublishedJun 10, 2026
First seenJun 10, 2026
Weakness typeCWE-1284CWE-1284

How to fix

Update
  • sahlberg libnfs55c18ea33a83d667f79f0ef209c96895795c729f or later

Affected products

ProductAffected versionsFixed in
sahlberg libnfsv < 55c18ea33a83d667f79f0ef209c96895795c729f55c18ea33a83d667f79f0ef209c96895795c729f

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.