CVE-2026-8232 — Dotouch XproUPF UPF Process libvlib.so vlib_worker_loop denial of service

Back Back to CVE browser

MEDIUM

Dotouch XproUPF UPF Process libvlib.so vlib_worker_loop denial of service

Published May 10, 2026

5.1

MEDIUM

CVSS 4.0

EPSS 0.29%

Description

A vulnerability was found in Dotouch XproUPF 2.0.0-release-088aa7c4. This impacts the function vlib_worker_loop in the library /usr/xpro/upf/tools/libs/libvlib.so of the component UPF Process. The manipulation results in denial of service. The vendor was contacted early about this disclosure.

Affected products

Vendor Dotouch Product XproUPF Default
n/a
- Version
  2.0.0-release-088aa7c4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dotouch

XproUPF

n/a

Version	Status	Constraints
2.0.0-release-088aa7c4	affected	-

Remediation

No remediation recorded yet.

Metrics

0.29% 0.00292

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00292

Score over time

May–Oct 2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.29% (0.00292)	19.72th	v5 (v2026.06.15)
Jun 15, 2026	0.19% (0.00190)	8.70th	v5 (v2026.06.15)
May 10, 2026	0.01% (0.00013)	2.08th	v4 (v2025.03.14)

Weaknesses (1)

CWE-404

Improper Resource Shutdown or Release

References (3)

https://vuldb.com/submit/808794
exploitthird-party-advisory
https://vuldb.com/vuln/362449
vdb-entrytechnical-description
https://vuldb.com/vuln/362449/cti
signaturepermissions-required

Link	Providers	Tags
https://vuldb.com/submit/808794		exploitthird-party-advisory
https://vuldb.com/vuln/362449		vdb-entrytechnical-description
https://vuldb.com/vuln/362449/cti		signaturepermissions-required