CVE-2026-128886

Name of the Vulnerable Software and Affected Versions dbus (affected versions not specified)

Description A flaw exists in dbus when configured with the nonce-tcp transport. An unauthenticated attacker who can connect to an exposed listener can trigger a Denial of Service (DoS) by initiating a connection and withholding the required authentication token. Since the server processes this verification without a timeout, the stalled connection blocks the accept process, preventing legitimate clients from establishing new connections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.