CVE-2026-26456
UnknownSummary
In ccoap (commit 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5), a null pointer dereference vulnerability exists in the server-side session management logic. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes without proper synchronization.
Risk Assessment
An attacker can exploit the race condition to cause a server crash (DoS) or potentially gain unauthorized access to sessions.
Recommendation
Update ccoap to a version with synchronization fixes or restrict access to the COAP server.
Original NVD description (English source)
A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes without proper synchronization.