What’s Vulnerable › Vulnerabilities

CVE-2026-22591: Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-09 · updated 2026-09-14
• Weakness: CWE-400

Description

eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.6.12, 2.14.6, 3.2.4, and 3.4.3, Fast DDS’s implementation of SQL‑based content filtering (DDSSQLFilter) allows any participant in a DDS domain to remotely crash other Fast DDS participants by sending a single crafted SEDP `DATA` submessage whose `PID_CONTENT_FILTER_PROPERTY.filterExpression` contains a deeply nested filter expression. Versions 2.6.12, 2.14.6, 3.2.4, and 3.4.3 fix the issue.

Affected products

• eProsima Fast-DDS: before 2.6.12; from 2.7.0, < 2.14.6; from 3.0.0, < 3.2.4; from 3.4.0, < 3.4.3

References

• https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-7577-rf2r-j88m
• https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-7577-rf2r-j88m

Get alerted when CVE-2026-22591 or the next vulnerability affects your stack