Back Gbhackers

ISC Issues Critical Warning Over Kea DHCP Vulnerability That Could Remotely Crash Services

Gbhackers •Divya • March 27, 2026

The Internet Systems Consortium (ISC) has released a critical security advisory addressing a high-severity vulnerability in its Kea DHCP server software. Kea is a modern, high-performance DHCP server widely used by enterprise networks and internet service providers to manage network IP allocations. Tracked as CVE-2026-3608, this flaw could allow unauthenticated remote attackers to crash essential […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in Kea DHCP Server Allows Remote Crash The Internet Systems Consortium (ISC) has issued a critical security advisory regarding a high-severity vulnerability in the Kea DHCP server, tracked as CVE-2026-3608. This vulnerability, published on 2026-03-25, permits unauthenticated remote attackers to exploit a stack overflow error, leading to the crashing of the receiving daemon. The flaw poses a significant risk to enterprise networks and internet service providers that utilize the Kea DHCP server for managing IP allocations. Network administrators are urged to take immediate action to mitigate potential disruptions. The scope of impact includes essential network services that rely on the Kea DHCP server, potentially affecting millions of users. As of the advisory date, there are no known exploits in the wild, but the severity of the vulnerability necessitates prompt attention. 2 sources 72

Extracted Entities

ISC Issues Critical Warning Over Kea DHCP Vulnerability That Could Remotely Crash Services

The full story

Extracted Entities

Companies (1)

CVEs (1)

Platforms (1)