CVE-2026-111997
MEDIUM—CVSS v3
—CVSS v2
0.25%
EPSS (exploit probability)
CWE-1333CWE
Description
ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching a function call that uses the Address6 constructor.
Affected routers (0)
No routers currently mapped to this CVE in our database.