CVE-2026-22591CWE-400CWE-674denial-of-service

CVE-2026-22591

High · published September 9, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.6.12, 2.14.6, 3.2.4, and 3.4.3, Fast DDS’s implementation of SQL‑based content filtering (DDSSQLFilter) allows any participant in a DDS domain to remotely crash other Fast DDS participants by sending a single crafted SEDP `DATA` submessage whose `PID_CONTENT_FILTER_PROPERTY.filterExpression` contains a deeply nested filter expression. Versions 2.6.12, 2.14.6, 3.2.4, and 3.4.3 fix the issue.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00316 · 23.4th percentile
Weaknesses
CWE-400 · Uncontrolled Resource Consumption; CWE-674 · Uncontrolled Recursion
Published
2026-09-09T20:17Z
References (2)
EPSS history
Timeline
  • 11 SEP 03:17Z
    EPSS moved — → 0%
    epss
  • 09 SEP 15:47Z
    Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)
    cvelistv5