CVE-2026-125134

FAQ

How could an attacker exploit this vulnerability?

An unauthenticated attacker on the same network segment could send specially crafted SOAP requests to a system running the Function Discovery Resource Publication service. Exploitation depends on inducing a low-memory allocation failure and winning an asynchronous request-cleanup timing condition. Successful exploitation could allow the attacker to execute code as SYSTEM.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation requires the target system to be under sustained low-memory (memory pressure) conditions, which are not commonly present in normal operation. This makes the vulnerability difficult to reliably trigger, as the attacker must first induce or wait for a constrained memory state before exploitation becomes possible.