Is CVE-2026-43958 in the CISA KEV catalog?

No. CVE-2026-43958 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2026-43958?

CVE-2026-43958 has a CVSS v3 base score of 7.8 (Important).

What is the EPSS score for CVE-2026-43958?

CVE-2026-43958 has an EPSS score of 0.13% (3th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2026-43958?

Upgrade python3-rrdtool on rocky 10 to 0:1.8.0-21.el10_2 or later. Fixes are available for 30 affected products.

CVE & CISA-KEV Catalog

CVE-2026-43958

HIGH

7.8

CVSS v3

NVD

Description

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary code execution, impacting the integrity and confidentiality of data.

CWE-121Stack-based Buffer Overflow

How to fix

Remediation Available

python3-rrdtoolRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

python3-rrdtoolRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

python3-rrdtool-debuginfoRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

python3-rrdtool-debuginfoRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtoolRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtoolRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-debuginfoRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-debuginfoRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-debugsourceRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-debugsourceRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-develRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-develRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-docRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-docRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-luaRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-luaRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-lua-debuginfoRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-lua-debuginfoRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-perlRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-perlRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-perl-debuginfoRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-perl-debuginfoRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-rubyRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-rubyRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-ruby-debuginfoRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-ruby-debuginfoRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-tclRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-tclRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-tcl-debuginfoRocky

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

rrdtool-tcl-debuginfoRed Hat / RHEL

Fixed in:0:1.8.0-21.el10_2RHSA-2026:33731

Fixed in:0:1.7.0-17.el8_10RHSA-2026:34155

Fixed in:0:1.7.2-22.el9_8RHSA-2026:34156

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

0.13%probability of exploitation in 30 days

3rdpercentile

Low risk: more likely to be exploited than 3% of all known CVEs.

References

Other references5

Related Vulnerabilities

Other CWE-121 (Stack-based Buffer Overflow) vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2025-22457	Critical	9.0	100%	KEV + Ransom	Fix
CVE-2025-0282	Critical	9.0	100%	KEV + Ransom	-
CVE-2021-20038	Critical	9.8	100%	KEV + Ransom	-
CVE-2009-0927	High	8.8	97%	KEV	Fix
CVE-2020-10924	High	8.8	87%	-	-
CVE-2022-20705	Critical	10.0	80%	-	-

Embed a live status badge for CVE-2026-43958

Markdown

[![CVE-2026-43958](https://tridentstack.com/cve/badge/CVE-2026-43958.svg)](https://tridentstack.com/cve/CVE-2026-43958)

HTML

<a href="https://tridentstack.com/cve/CVE-2026-43958"><img src="https://tridentstack.com/cve/badge/CVE-2026-43958.svg" alt="CVE-2026-43958"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-07-01.