CVE-2026-50254
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Jun 30, 2026
Vendor
unknown
Description
An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. Against storescp in its default single-process mode, memory grows quickly and the service is eventually killed, after which it stops accepting connections until an operator restarts it.