CVE WATCH / VULNERABILITY DETAIL
CVE-2026-103936
HIGHCVSS 7.5NVD feed
Published 15 October 2026 · tracked since 16 October 2026
Description
libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 6.0.28, the @libp2p/webrtc webRTCDirect() Node.js listener processes unauthenticated STUN Binding Requests before PeerId authentication, Noise, muxing, protocol negotiation, connection creation, or connection-manager admi
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-111138 MEDIUM 5.5
- CVE-2026-110874 MEDIUM 6.6
- CVE-2026-110878 MEDIUM 5.4
- CVE-2026-109924 MEDIUM 5.9
- CVE-2026-109932 MEDIUM 5.9
- CVE-2026-109829 HIGH 7.4
- CVE-2026-109841 MEDIUM 5.9
- CVE-2026-109869 HIGH 7.5
- CVE-2026-109383 HIGH 7.4
- CVE-2026-104150