CVE-2026-102005

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09

  • Published Sep 28, 2026
  • CVSS 5.5 medium
  • 0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-102005 at the National Vulnerability Database