CVE-2026-52486
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module.
Risk Assessment
The risk includes local denial of service, which could disrupt systems using OpenDDS.
Recommendation
Upgrade OpenDDS to a version that includes a fix for this issue. Restrict local access to the system.
Other vulnerabilities in OpenDDS
See all- CVE-2026-52836High
In OpenDDS prior to 3.34.0, a network attacker can send a malformed RTPS UDP submessage that causes the read pointer to advance beyond valid data. This results in a SIGSEGV in the receive thread and termination of the DDS process. No authentication or user interaction is required.
- CVE-2023-37915High
OpenDDS, an open-source C++ implementation of the Data Distribution Service (DDS), crashes while parsing a malformed PID_PROPERTY_LIST in a DATA submessage during participant discovery. Attackers can remotely crash OpenDDS processes by sending a DATA submessage containing the malformed parameter to the known multicast port.
Original NVD description (English source)
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module