CVE-2026-128886
MEDIUM
NVD
CVSS Score
6.2
Severity
MEDIUM
Published
Nov 13, 2026
Vendor
unknown
Description
A flaw was found in dbus when configured with the nonce-tcp transport. An unauthenticated attacker able to connect to an exposed listener can cause a Denial of Service (DoS) by opening a connection and withholding the expected authentication token. Because the server processes this verification without enforcing a timeout, the stalled connection blocks the accept process and prevents legitimate clients from establishing new connections.