CVE-2026-15812
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
In the ACL subsystem of kronosnet (versions <= 1.34), when configured for dynamic links without encryption, the validation trusts the link ID from packets. A remote unauthenticated attacker can spoof the link ID and bypass ACL, injecting arbitrary packets into the application layer.
Risk Assessment
Risk of data corruption or service instability due to injection of unauthorized packets.
Recommendation
Upgrade kronosnet to a version later than 1.34 or enable network encryption.
Other vulnerabilities in kronosnet
See all- CVE-2026-15811Medium
In kronosnet (version <=1.34), the framework does not wipe sensitive memory after cryptographic configuration changes, leaving encryption keys in memory. A local attacker can retrieve them to decrypt cluster communications or inject malicious packets.
- CVE-2026-15813Medium
Vulnerability in the network packet de-fragmentation engine of kronosnet (versions <= 1.34). The reassembly code does not properly validate sequence numbers of fragments, allowing an attacker to send malformed packets. This can lead to out-of-bounds memory access or heap corruption, causing application crashes or system instability.
Original NVD description (English source)
A vulnerability was found in the internal Access Control List (ACL) subsystem of kronosnet (Version affected: <= 1.34). When the framework is explicitly configured to manage dynamic links (accepting network traffic from any IP address) without network payload encryption, the validation architecture implicitly trusts the link ID provided within incoming data packets. A remote, unauthenticated attacker can exploit this lack of validation by spoofing a legitimate link ID inside crafted network frames. This allows the attacker to fully bypass the ACL framework and inject arbitrary data packets into the application layer, potentially leading to data corruption or service instabilities.