CVE-2026-71217

Name of the Vulnerable Software and Affected Versions iperf3 (affected versions not specified)

Description A flaw in the server's handling of control-channel JSON allows a remote attacker to cause a Denial of Service (DoS). By sending crafted JSON containing oversized numeric parameters, specifically parallel and len, the attacker can trigger improper input validation. This leads to resource exhaustion through the creation of excessive streams and threads, as well as large buffer allocations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.