en
Severity across 3 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 3 vulnerability records affecting wicked.
Among the 3 records analyzed by CyStack, 1 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-71402wicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-71401wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-44932indirect remote shell command injection via unsanitized DHCP options in wicked | Exploitation statusNot known exploited | FixYes | Published06/16/2026 | SeverityHigh |
