CVE-2026-18898

UTT HiPER 1200GW (up to v2.5.3-170306) is affected by a stack-based buffer overflow in the strcpy usage of /goform/ConfigAdvideo when timestart is manipulated. The vulnerability arises in the function strcpy and can be exploited remotely; public exploit code exists. Affected component is the Conf...

EUVD-2026-53022

A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit i...

CVE-2026-18895

CVE-2026-18895 affects UTT HiPER 1250GW builds

CVE-2026-18895

A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

EUVD-2026-52996

open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src/client/uaclienthighlevel.c. This allows a remote attacker to cause a denial of service...

EUVD-2026-52964

Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server LDS is built with multicast discovery enabled through the MDNSD backend. An unauthenticated remote attacker can send a RegisterServer or RegisterServer2 request containing many unique discoveryUrls. This allow...

EUVD-2026-52994

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling...

DEBIAN-CVE-2026-18103

A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI Open Management Application Programming Interface port, especially if not secured with TSIG Transaction Signature key authentication, could send a specially crafted lease creation request. This request, containing...

CVE-2026-18103

A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI Open Management Application Programming Interface port, especially if not secured with TSIG Transaction Signature key authentication, could send a specially crafted lease creation request. This request, containing...

UBUNTU-CVE-2026-18103

A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI Open Management Application Programming Interface port, especially if not secured with TSIG Transaction Signature key authentication, could send a specially crafted lease creation request. This request, containing...

CVE-2026-67869

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the ServiceCall validates input arguments against runtime-resolved InputArguments metadata...

PT-2026-68235

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description An issue exists involving improper restriction of operations within the bounds of a memory buffer. This is categorized under CWE-119, which refers to memory corruption...

CVE-2026-67867

Systerel S2OPC 1.7.3 is affected by a Buffer Overflow vulnerability in the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data. The issue can be triggered remotely to cause a denial of service. The available documents confirm the affected product/version and the un...

CVE-2026-67866

The CVE-2026-67866 entry concerns Systerel S2OPC 1.7.3, where a Buffer Overflow in the client wrapper DeleteMonitoredItems path—specifically via LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse and SOPC_StaMac_NewDeleteMonitoredItems—allows remote A to cause a Denial of Service. The affected ...

CVE-2026-67869

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the ServiceCall validates input arguments against runtime-resolved InputArguments metadata...

Oracle Linux 10 : ELSA-2026-50144-0: / libgcrypt (ELSA-2026-501440)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-501440 advisory. - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext Tenable has extracted the preceding description block directly from t...

MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-1457:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1457:01 advisory. DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVE-2026-9698 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : mingw-glib2 (ELSA-2026-49512)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-49512 advisory. - Fix CVE-2026-58010: off-by-one error in gvstupleisnormal Resolves: RHEL-212164 - Fix CVE-2026-58011: gdatetimeaddfull range validation Resolves:...

CVE-2026-44950

Font Server Client Cumulative Glyph Data Heap Buffer Overflow...

CVE-2026-67866

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMacProcessMsgDeleteMonitoredItemsResponse and SOPCStaMacNewDeleteMonitoredItems in the client wrapper DeleteMonitoredItems path...