Medium 6.8
CVE-2026-72704
Proof of Concept Exploits Released for Rocq Prover Vulnerabilities
Vendor / product: Rocq Prover
Event date: 2026-08-24
Public PoC: Yes
First tracked by RiskWire: 2026-10-26
Sources & citations (4)
- oss-security - CVE-2026-72704: Rocq guard checker trusts corrupted recursive tree after transport (0 = 1 demonstrated) — 0-day openwall.com · 2026-10-26
- oss-security - CVE-2026-72703: Rocq guard checker accepts non-terminating fixpoint via unchecked cross-calls (0 = 1 demonstrated) openwall.com · 2026-10-26
- CVE-2026-72714: Rocq universe checking state desynchronised after module close (0 = 1 demonstrated) — 0-day seclists.org · 2026-10-25
- oss-security - CVE-2026-72714: Rocq universe checking state desynchronised after module close (0 = 1 demonstrated) — 0-day openwall.com · 2026-10-26
References
See CVE-2026-72704 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →