Vendor
A remote denial-of-service vulnerability in iperf3, tracked as CVE-2026-71217, allows unauthenticated attackers to trigger resource exhaustion through crafted control-channel JSON packets.