CoreCVE
Back

HIGH

XQUIC Improper STREAM Frame Validation in Initial/Handshake Packets

Published Apr 15, 2026

Description

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux (QUIC protocol implementation, packet processing module, STREAM frame handler modules) allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-347

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner alibaba
Published Apr 15, 2026
Updated Apr 15, 2026
Reserved Apr 15, 2026
Link CVE-2026-6328
CISA Vulnrichment
Updated Apr 15, 2026
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2026-6328
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-6328
ENISA EUVD
Assigner alibaba
Published Apr 15, 2026
Updated Apr 15, 2026
Exploited since n/a
Link EUVD-2026-22832
EUVD-2026-22832