VxWorks 7 Memory Resource leak

Description

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09.

Scores

EPSS (exploitation in 30 days)

0.10% · top 99% of all CVEs (6 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

• CWE-772 Missing release of resource after effective lifetime (opens in a new tab)All about CWE-772 and its CVEs

Affected products

• Wind River · VxWorks 7

  • affected VxWorks 7

References (1)

• https://support2.windriver.com/index.php?page=cve&order_by=cve_modified_date&order_way=asc#list (opens in a new tab)

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2026-97686](https://trackcve.app/badge/CVE-2026-97686.svg)](https://trackcve.app/cve/CVE-2026-97686)

Record last updated 28 Sept 2026, 21:41 UTC.