CVE-2026-54086

Awaiting Analysis Awaiting Analysis - Queue

SLE API for Java Buffer Overflow Vulnerability

Publication date: 2026-10-13

Last updated on: 2026-10-16

Assigner: GitHub, Inc.

Description

SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing an unauthenticated client of the SLE listening service to trigger exceptions, resource leakage, and denial of service. This issue is fixed in version 5.1.7.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-54086

EUVD

EUVD-2026-99227

Affected Vendors & Products

Vendor	Product	Version / Range
esa	sleapi-j	< 5.1.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

CVE-2026-54086 is a vulnerability in SLE API for Java (esa/sleapi-j) versions prior to 5.1.7. It involves improper handling of ISP1 PDU packets where an attacker can send a malformed packet with an unbounded body length. This causes the system to allocate excessive memory, trigger unhandled exceptions, and leak resources, leading to a denial of service.

Detection Guidance

Detecting this vulnerability requires monitoring for malformed ISP1 PDU packets targeting SLE services. Check for unhandled exceptions or resource leaks in SLE API for Java logs. Use network monitoring tools like tcpdump or Wireshark to capture and analyze incoming PDU packets for unusual lengths or truncation. Example commands: tcpdump -i any -w sle_traffic.pcap port <SLE_PORT> or netstat -tulnp | grep <SLE_SERVICE>.

Impact Analysis

This vulnerability allows unauthenticated attackers to remotely crash the SLE service by sending specially crafted packets. The impact includes system unavailability due to resource exhaustion, potential service disruption, and degraded performance. No user interaction or privileges are required for exploitation.

Compliance Impact

This vulnerability primarily causes denial of service (DoS) conditions through resource exhaustion, which could impact system availability. While it does not directly expose sensitive data, prolonged DoS conditions may interfere with systems handling regulated data under GDPR or HIPAA, potentially leading to compliance issues related to availability and integrity requirements.

Mitigation Strategies

Immediately update SLE API for Java to version 5.1.7 or later. If updating is not possible, restrict network access to SLE services using firewalls or network segmentation to block unauthenticated clients. Monitor system resources for unusual consumption or crashes.

Hi! I’m here to help you understand CVE-2026-54086. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70