CVE-2026-18794
Received Received - Intake

Memory Exhaustion in OpenRGB Network Protocol

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: SUSE

Description
The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-18794
EUVD
EUVD-2026-66362

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1288 The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The OpenRGB network protocol is vulnerable to memory exhaustion and out-of-bounds memory reads and writes. Attackers can exploit this by sending inconsistent data through the network protocol, causing crashes or potential code execution.

Impact Analysis

This vulnerability can lead to denial-of-service conditions by exhausting system memory or crashing the application. It may also allow attackers to read or write memory outside expected bounds, potentially leading to unauthorized access or control.

Mitigation Strategies

Disable the OpenRGB network protocol if not required. Update OpenRGB to the latest version that patches this issue. Monitor network traffic for unusual patterns that may indicate exploitation attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18794. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart