CVE-2026-6328: Xquic Project Xquic

High severity, CVSS 8.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux (QUIC protocol implementation, packet processing module, STREAM frame handler modules) allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3.

Affected products

• Xquic Project Xquic: up to and including 1.8.3

Published 2026-04-15. Last modified 2026-06-17.