CVE-2026-97152

Description

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf.

Overview

State: PUBLISHED
Assigner (CNA): mitre
CVSS severity: HIGH
CVSS score: 8.6 / 10
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H
Effective score: 8.6 / 10 HIGH source: CNA overview
CWE(s): CWE-122
Reserved: 2026-09-24
Published: 2026-09-24 03:17 UTC
Last updated: 2026-09-24 12:47 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97152.json
Linked Threat: CVE-2026-97152 — CVE-2026-97152

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

EPSS score: 0.0031 (probability of exploitation in next 30 days)
EPSS percentile: 21.51% vs all CVEs — higher = more likely to be exploited, as of 2026-09-24

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-85784
Assigner: mitre
Published: Sep 24, 2026, 3:17:23 AM
Updated: Sep 24, 2026, 12:47:21 PM
EUVD base score (CVSS 4.0): 8.6 / 10
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H
EUVD-reported EPSS: 0.3100
Vendors: Nanomsg
Products: Nanomsg (0.5.0 <1.2.3)
Aliases: GHSA-qf87-675j-h456

ENISA description: Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf.

EUVD references (3)

Affected products (1)

Vendor	Product	Versions	Platforms
Nanomsg	Nanomsg	`0.5.0` (affected)	—

Vendor references (3)

References embedded in the original CVE record by the assigning CNA.

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

Remediations (10)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

CVE-2026-97152 - Vulnerability Details - OpenCVE

web:app.opencve.io

Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf.

2026-09-25 10:08 UTC
CVE-2026-97152 · Nanomsg · CVSS 8.6 · CVE Brief Analyst Report

web:cvebrief.com

CVE-2026-97152 8.6 Nanomsg · Nanomsg Nanomsg contains a heap-based buffer overflow in the WebSocket transport layer, triggered by an unchecked copy of the Sec-WebSocket-Version header, allowing for potential remote code execution. Quick facts CVSS score 8.6 (High) Affected versions 0.5.0 up to 1.2.3 First covered September 24, 2026 daily brief ...

2026-09-25 10:08 UTC
CVE-2026-97152 - Exploits & Severity - Feedly

web:feedly.com

CVE ID : CVE-2026-97152 Published : Sept. 24, 2026 , 3:17 a.m. 25 minutes ago Description : Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf.

2026-09-25 10:08 UTC
August 2026 cumulative update - .NET Framework | Microsoft Learn

web:learn.microsoft.com

Unlike traditional cumulative updates that patch individual components, this update delivers the full .NET Framework 3.5 product as a standalone installer. It replaces any previously installed version.

2026-09-25 10:08 UTC
Microsoft Patch Tracker (September 2026): Exploit-Ranked | Senserva

web:senserva.com

Every Microsoft security patch (KB) and the CVEs it fixes, with severity, CVSS, and CISA KEV status. Cross-linked to the CVE reference.

2026-09-25 10:08 UTC
March 13, 2026—Hotpatch KB5084597 (OS Builds 26200.7982 and 26100.7982 ...

web:support.microsoft.com

This update for Windows 11, version 25H2 and 24H2 (KB5084597) incudes security improvements. To learn more about differences between security updates, optional non-security preview updates, out-of-band (OOB) updates, and continuous innovation, see Windows monthly updates explained. For information on Windows update terminology, see the different types of Windows software updates. To view the ...

2026-09-25 10:08 UTC
What Is CVE Remediation in 2026? - aikido.dev

web:www.aikido.dev

CVE remediation is fixing known flaws in the software you run. Why upgrading often fails, what remediation actually involves, and how backporting fixes it.

2026-09-25 10:08 UTC
Critical Patches Issued for Microsoft Products, July 14, 2026

web:www.cisecurity.org

Microsoft reports CVE - 2026 -56164 has been exploited in the wild. CVE - 2026 -56164 may allow remote cyber threat actors to gain unauthorized access to on-premises SharePoint Server instances. Microsoft noted that integrating its Antimalware Scan Interface (AMSI) can provide temporary mitigation by actively scanning and detecting malicious POST requests associated with exploitation attempts. The ...

2026-09-25 10:08 UTC
August's Patch Tuesday is a monster: 751 fixes, with an exploited ...

web:www.computerworld.com

August's Patch Tuesday is a big one: 751 fixes, an exploited WinSock flaw and plenty of critical Windows, Office and Exchange issues.

2026-09-25 10:08 UTC
Patch Tuesday September 2026: Security Updates & CVE Analysis

web:zecurit.com

Get the complete breakdown of Microsoft's September 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

2026-09-25 10:08 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-97152.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-97152",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-24T12:46:52.122399Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-24T12:47:21.751Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "websocket"
          ],
          "product": "Nanomsg",
          "programFiles": [
            "ws_handshake.c"
          ],
          "repo": "https://github.com/nanomsg/nanomsg",
          "vendor": "Nanomsg",
          "versions": [
            {
              "lessThan": "1.2.3",
              "status": "affected",
              "version": "0.5.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T03:17:23.503Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/nanomsg/nanomsg/pull/1130"
        },
        {
          "url": "https://nanomsg.org"
        },
        {
          "url": "https://github.com/nanomsg/nanomsg/releases/tag/1.2.3"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Upgrade to nanomsg 1.2.3 or higher, or use NNG which is hardened for hostile networks."
            }
          ],
          "value": "Upgrade to nanomsg 1.2.3 or higher, or use NNG which is hardened for hostile networks."
        }
      ],
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Disable the websocket transport, or ensure that it is only available to trusted peers."
            }
          ],
          "value": "Disable the websocket transport, or ensure that it is only available to trusted peers."
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-97152",
    "datePublished": "2026-09-24T03:17:23.503Z",
    "dateReserved": "2026-09-24T03:17:23.134Z",
    "dateUpdated": "2026-09-24T12:47:21.751Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}