CVE-2026-101283Published
iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (guard warns only), so an unauthenticated client overflows the hea…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-101283 · Microsoft / collected KEV context
cve-program · CVE-2026-101283
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.