CVE-2026-8232CWE-404
Dotouch XproUPF UPF Process libvlib.so vlib_worker_loop denial of service
Medium · published May 10, 2026
What it is
A vulnerability was found in Dotouch XproUPF 2.0.0-release-088aa7c4. This impacts the function vlib_worker_loop in the library /usr/xpro/upf/tools/libs/libvlib.so of the component UPF Process. The manipulation results in denial of service. The vendor was contacted early about this disclosure.
The record
Technical detail
- CVSS v4.0
- 5.1 · MEDIUM
- Vector
- CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X
- EPSS
- 0.00292 · 20.7th percentile
- Weakness
- CWE-404 · Improper Resource Shutdown or Release
- Published
- 2026-05-10T05:15Z
EPSS history
Timeline