CVE-2026-42348
No KEV entry is attached to this observation; this is not evidence that exploitation is absent.
FIRST EPSS: 0.31 % · percentile 24.15 % · scored 7 Nov 2026.
Observed 07 Nov 2026 16:07:52 UTC · Complete immutable risk JSON
EUVD-2026-29706Published
OpAMP client reads unbounded HTTP response bodies
Collected exploitation and prediction evidence
Risk source coverageCISA KEV is observed exploitation evidence. FIRST EPSS is a dated prediction of exploitation in the next 30 days. Missing scores are unknown. This collector requests predictions only for explicit CVE aliases in the public NuGet archive; Microsoft release views retain their existing prediction scope.
Dated risk observations
Risk history is separate from CNA/OSV content history. Daily score drift is retained but only an upward crossing of 10% triggers the prediction change event.
CVE-2026-42348 · 07 Nov 2026 16:07:52 UTC
CVE-2026-42348 · 06 Nov 2026 19:10:17 UTC
CVE-2026-42348 · 05 Nov 2026 22:49:22 UTC
CVE-2026-42348 · 05 Nov 2026 02:54:06 UTC
CVE-2026-42348 · 03 Nov 2026 16:59:18 UTC
CVE-2026-42348 · 02 Nov 2026 23:59:04 UTC
CVE-2026-42348 · 01 Nov 2026 23:58:58 UTC
CVE-2026-42348 · 01 Nov 2026 03:04:52 UTC
CVE-2026-42348 · 31 Oct 2026 01:52:30 UTC
CVE-2026-42348 · 29 Oct 2026 18:29:26 UTC
CVE-2026-42348 · 28 Oct 2026 19:55:37 UTC
CVE-2026-42348 · 27 Oct 2026 15:46:19 UTC
CVE-2026-42348 · 27 Oct 2026 00:23:05 UTC
CVE-2026-42348 · 25 Oct 2026 15:18:41 UTC
Immutable source observations
10 recorded revisionsEach citation identifies one complete source statement. Source modification dates and the time this installation observed them are distinct. Latest history includes records historically associated by source identifiers; a removed alias is not a current equivalence claim. Exact citations show that source record's own earlier observations. Failed reads and unchanged polls do not rewrite history.
7 Nov 2026 09:34:06 UTC
OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to read all bytes from the server, with …
euvd · EUVD-2026-29706 · Published
5 Nov 2026 09:02:17 UTC
OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to read all bytes from the server, with …
euvd · EUVD-2026-29706 · Published
3 Nov 2026 08:06:57 UTC
OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to read all bytes from the server, with …
euvd · EUVD-2026-29706 · Published
1 Nov 2026 07:13:20 UTC
OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to read all bytes from the server, with …
euvd · EUVD-2026-29706 · Published
30 Oct 2026 06:57:27 UTC
OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to read all bytes from the server, with …
euvd · EUVD-2026-29706 · Published
28 Oct 2026 05:13:50 UTC
OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to read all bytes from the server, with …
euvd · EUVD-2026-29706 · Published
27 Oct 2026 11:12:01 UTC
OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to read all bytes from the server, with …
nvd · CVE-2026-42348 · Published
25 Oct 2026 10:17:10 UTC
OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to read all bytes from the server, with …
nvd · CVE-2026-42348 · Published
23 Oct 2026 16:01:25 UTC
OpAMP client reads unbounded HTTP response bodies
osv · GHSA-w2jh-77fq-7gp8 · Published
23 Oct 2026 15:48:27 UTC
OpAMP client reads unbounded HTTP response bodies
cve-program · CVE-2026-42348 · Published