CVE-2026-127030

Name of the Vulnerable Software and Affected Versions freeradius (affected versions not specified)

Description An improper length validation in the EAP-FAST module allows a stack-based buffer overflow during session ticket processing. A remote, unauthenticated attacker can trigger this by sending a specially crafted handshake request, which causes the server process to crash and results in a Denial of Service (DoS).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.