Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:mooncake:transfer_engine:*:*:*:*:*:*:*:*

2 briefs RSS
low advisory

Memory Exhaustion Vulnerability in Mooncake Transfer Engine

An unauthenticated memory exhaustion vulnerability in the Mooncake transfer engine (CVE-2026-103761) allows remote attackers to trigger a denial-of-service condition by repeatedly sending large notify frames to the handshake RPC port.

Mooncake transfer engine denial-of-service vulnerability network
1t 1c
critical advisory

Arbitrary Memory Access Vulnerability in Mooncake Transfer Engine

An untrusted pointer dereference vulnerability (CVE-2026-103764) in the Mooncake transfer engine allows unauthenticated attackers to perform arbitrary memory reads and writes, potentially leading to remote code execution.

transfer engine +1 vulnerability rce memory-corruption
2t 1c updated