PT-2026-54759 · Undefined · Undefined

Reyu6 · Published 2026-07-01 · Updated 2026-07-01 · CVE-2026-38891

Mitre

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

An improper input validation in the gazebo ros diff drive.cpp component of gazebo plugins v3.9.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted geometry msgs::Twist message.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-38891

Affected Products

Undefined

References · 3

• 🔥 https://github.com/REYu6/ROS-vul/blob/main/Gazebo%20CVE/260328211736.mp4 · Exploit
• 🔥 https://github.com/REYu6/ROS-vul/blob/main/Gazebo%20CVE/gazebo_ros_diff_drive.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-38891 · Security Note