Skip to content
Threat Feed
Subscribe

Product

Mooncake Transfer Engine (<= 0.3.13.post1)

1 brief RSS
low advisory

Memory Exhaustion Vulnerability in Mooncake Transfer Engine

An unauthenticated memory exhaustion vulnerability in the Mooncake transfer engine (CVE-2026-103761) allows remote attackers to trigger a denial-of-service condition by repeatedly sending large notify frames to the handshake RPC port.

Mooncake transfer engine denial-of-service vulnerability network
1t 1c