CVE-2026-89147 — Net-SNMP through 5.9.5.2 Denial of Service via Blocking Unauthenticated SMUX Read
Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly acc…
Published: 2026-09-11 · CVSS: 8.7 · CVSS 4.0
Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the single-threaded snmpd main loop to block indefinitely and suspend all SNMP processing.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7