CVE-2026-93683
Tenable Plugin
Checking the public Tenable catalog…
AI Threat Summary
CVE-2026-93683 is a moderate vulnerability with a CVSS score of 6.4 affecting the target software. Threat hunters should monitor for exploit attempts and apply vendor patches immediately.
Description
A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory and can allocate a host copy before validating that length. A guest that changes the length between those reads, or that supplies an out-of-range next index on a small host copy in the vDPA relay path, can cause the host vhost process to walk past the validated mapping or heap copy. That can crash or disrupt the vhost process. Out-of-bounds bytes are consumed as descriptor fields for GPA translation and are not returned to the guest as payload. This is a residual issue in the non-contiguous indirect descriptor copy path introduced as part of the CVE-2018-1059 fix.
Attack Chain
Attacker scans for vulnerable versions using version banners or PoC scanners
Attacker triggers CVE-2026-93683 vulnerability with a crafted request or payload
Vulnerability exploited to perform unauthorized actions on the target system
Depending on vulnerability type, attacker achieves data access, service disruption, or code execution
MITRE ATT&CK Techniques
Indicators of Compromise
| Type | Value | Description | |
|---|---|---|---|
| user_agent | Mozilla/5.0 (compatible; exploit/1.0) |
Generic exploit scanner user agent pattern | |
| url | /api/vuln-endpoint?payload=<malicious> |
Exploit attempt against application endpoint — monitor access logs for anomalous params |
Remediation
Quick Facts
| CVE ID | CVE-2026-93683 |
| CVSS Score | 6.4 |
| Vector | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:H |
| Published | 2026-10-14 |
| Exploited | No |
| CISA KEV | No |
| PoC | Not public |