CVE-2026-43506

Summary

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by memory leaks from unauthenticated connections.

Affected Software

VendorProductVersion RangeStatus
ProsodyProsody0 < 0.12.6affected
ProsodyProsody1.0.0 < 13.0.5affected

Weaknesses

  • CWE-401: CWE-401 Missing Release of Memory after Effective Lifetime

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References