Cyber Resilience

CVE-2026-56788

MediumPublic PoC

Published: 25 June 2026

Published
25 June 2026
Modified
26 June 2026
KEV Added
—
Patch
—
CVSS Score v4 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0011 1.4th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2026-56788 is a medium-severity Out-of-bounds Read (CWE-125) vulnerability in Rtklib Rtklib. Its CVSS base score is 4.8 (Medium).

Operationally, ranked at the 1.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrecognized RINEX observation codes, allowing attackers to trigger denial of service. Crafted RINEX files with unknown observation types cause negative array indexing into the codepris table, resulting…

more

in reliable crashes and potential memory disclosure of adjacent global data.

CWE(s)
CWE-125

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

rtklib
rtklib
≤ 2.4.3

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References