CVE-2026-115680
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Arm Keil MDK-Middleware versions 8.0.0–8.3.0 may allow DHCPv6 Option-Walk over-reads and unintended data retransmission. The issue affects the library's network stack.
Risk Assessment
This may lead to data leakage or improper network service behavior in embedded devices using this software. The risk mainly affects systems exposed to untrusted DHCPv6 traffic.
Recommendation
Update Arm Keil MDK-Middleware to a version newer than 8.3.0 if available, or limit DHCPv6 service exposure to untrusted networks.
Other vulnerabilities in Arm Keil MDK-Middleware
See all- CVE-2026-115679Medium
Arm Keil MDK-Middleware version 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX buffer. The issue affects the library's FTP server component.
- CVE-2026-115678Medium
Arm Keil MDK-Middleware versions 8.0.0–8.3.0 may allow a pre-authentication out-of-bounds read in SNMP processing. The issue affects the library's SNMP component.
Original NVD description (English source)
Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission
Vulnerability data from NVD (NIST) · CISA KEV · EPSS