{"id":"CVE-2026-115680","kind":"vulnerability","aliases":["CVE-2026-115680"],"related":[],"title":"Arm Keil MDK-Middleware: DHCPv6 option parsing over-reads and retransmits data","description":"Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission","summary":"Arm Keil MDK-Middleware 8.0.0 through 8.3.0 may mishandle DHCPv6 options, reading past buffer bounds and retransmitting unintended data. The sources do not state the exact impact beyond information disclosure of memory contents.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["arm-keil","dhcpv6","embedded","infrastructure","mdk-middleware"],"not_affected_if":["dhcpv6-not-used"],"how_to_check":"- Check the installed MDK-Middleware version in the Keil MDK pack manager, and see whether it falls in `8.0.0` to `8.3.0`.\n- Confirm whether the project enables the DHCPv6 client stack from MDK-Middleware (Network component).","fix":"- Move MDK-Middleware to a version newer than `8.3.0` once Arm publishes a fixed release (unknown from sources).","status":"open","published_at":"2026-10-26T16:17:17+00:00","first_seen_at":"2026-10-26T16:31:01+00:00","triaged_at":"2026-10-26T16:33:12+00:00","updated_at":"2026-10-26T16:33:12+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-10-26T16:33:12Z","model":"claude-haiku-5-5","output":{"fix":"- Move MDK-Middleware to a version newer than `8.3.0` once Arm publishes a fixed release (unknown from sources).","reach":"network","title":"Arm Keil MDK-Middleware: DHCPv6 option parsing over-reads and retransmits data","impact":"low","summary":"Arm Keil MDK-Middleware 8.0.0 through 8.3.0 may mishandle DHCPv6 options, reading past buffer bounds and retransmitting unintended data. The sources do not state the exact impact beyond information disclosure of memory contents.","category":"infrastructure","nicknames":[],"who_cares":["embedded","arm-keil","mdk-middleware","dhcpv6"],"confidence":0.3,"needs_auth":"unknown","worst_case":"unknown; over-reads may leak device memory contents","analyst_note":"Check the NVD entry and Arm's security advisory for the fixed version, CVSS score, and exact exploit conditions.","how_to_check":"- Check the installed MDK-Middleware version in the Keil MDK pack manager, and see whether it falls in `8.0.0` to `8.3.0`.\n- Confirm whether the project enables the DHCPv6 client stack from MDK-Middleware (Network component).","needs_analyst":true,"not_affected_if":["dhcpv6-not-used"],"who_is_affected":"Embedded firmware teams building with Arm Keil MDK-Middleware 8.0.0 through 8.3.0 that use its DHCPv6 networking support. Projects that do not compile in DHCPv6 or use a different networking stack are likely unaffected, but the sources do not confirm this.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000635,"input_tokens":3294,"output_tokens":612,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-115680':17A,20A '-2026':16A,19A '8.0.0':35B,69C '8.3.0':37B,70C 'allow':72C 'arm':1A,22B,30B,64C 'arm-keil':21B 'beyond':58B 'bound':45B 'buffer':44B 'content':63B 'cve':15A,18A 'data':14A,49B,82C 'dhcpv6':6A,24B,40B,73C 'disclosur':60B 'embed':25B 'exact':56B 'impact':57B 'inform':59B 'infrastructur':26B 'keil':2A,23B,31B,65C 'may':38B,71C 'mdk':4A,28B,33B,67C 'mdk-middlewar':3A,27B,32B,66C 'memori':62B 'middlewar':5A,29B,34B,68C 'mishandl':39B 'option':7A,41B,75C 'option-walk':74C 'over-read':9A,77C 'pars':8A 'past':43B 'read':11A,42B,79C 'retransmiss':83C 'retransmit':13A,47B 'sourc':51B 'state':54B 'unintend':48B,81C 'walk':76C","nicknames":[],"mitigations":[],"who_affected":"Embedded firmware teams building with Arm Keil MDK-Middleware 8.0.0 through 8.3.0 that use its DHCPv6 networking support. Projects that do not compile in DHCPv6 or use a different networking stack are likely unaffected, but the sources do not confirm this.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T16:17:17+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115680","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115680","severity":null,"published_at":"2026-10-26T16:17:17+00:00","modified_at":"2026-10-26T16:17:17+00:00","first_seen_at":"2026-10-26T16:31:01+00:00","fetched_at":"2026-10-26T16:31:01+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}