Loading vulnerability…
CVE-2026-71217 is an improper input-validation vulnerability in the iperf3 server. The server accepts peer-controlled control-channel JSON numeric parameters, including parallel-stream and buffer-length values, without enforcing adequate bounds. A remote peer can submit oversized values that cause excessive stream and thread creation and/or large buffer allocations, exhausting system resources.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
16 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A CWE-20 input-validation vulnerability affecting the iperf3 package on AlmaLinux 9. The listed CVSS v3 vector indicates network-reachable, unauthenticated exploitation with high availability impact and no stated confidentiality or integrity impact.
A remotely exploitable, low-complexity vulnerability requiring no privileges or user interaction, with impact limited to availability (CVSS v3: 7.5). The content identifies AlmaLinux 10 repositories and the iperf3 package as affected context.
A remotely exploitable, low-complexity denial-of-service vulnerability with no required privileges or user interaction, impacting availability only according to the supplied CVSS vector.
A remote, unauthenticated denial-of-service vulnerability in the iperf3 server. Unbounded peer-controlled JSON parameters can cause resource exhaustion. It affects the iperf3 package on Red Hat Enterprise Linux 10 systems covered by RHSA-2026:61680.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.