Is CVE-2026-6679 actively exploited?

No active exploitation of CVE-2026-6679 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-6679 be exploited remotely?

Yes. CVE-2026-6679 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-6679?

CVE-2026-6679 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2026-6679

HIGH

CVE-2026-6679

CWE-190Published: June 25, 2026· Updated: Jun 27, 2026

7.5

CVSS v3.1

EPSS:0.39%probability of exploitation in 30 daysPercentile:30.3th

Official Description

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This affects builds using DTLS 1.3 and wolfSSL version 5.9.0 and earlier. A fix was added to the 5.9.1 release.

NVD Source

Technical Analysis

CVE-2026-6679 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 7.5.