CVE-2026-87734: Ocaml Utcp

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service.

Affected products

• Ocaml Utcp: before 0.0.6 (fixed in 0.0.6)

Published 2026-09-09. Last modified 2026-09-14.