CVE-2026-101276CWE-416

CVE-2026-101276

published October 1, 2026

CVSS
9.2
EPSS
0%
Percentile
32.6
In the wild
Unconfirmed
What it is

iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.

The record
Technical detail
CVSS
9.2 · NONE
CVSS v4.0
9.2 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00395 · 32.6th percentile
Weakness
CWE-416 · Use After Free
Published
2026-10-01T01:16Z
References (1)
https://newreleases.io/project/github/esnet/iperf/release/3.22 · 98a01053-8a31-4f6d-9aa9-252be161adc6
EPSS history
Timeline
  • 02 OCT 03:41Z
    EPSS moved — → 0%
    epss
  • 30 SEP 21:11Z
    iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without…
    cvelistv5