CVE-2026-122130

The CESNET ipfixcol2 software (versions 2.3.0 before 2.9.0 ) is vulnerable to a heap buffer overflow within the Forwarder output plugin . The root cause is an integer overflow occurring when wrapping uint16_t message length counters. This allows unauthenticated IPFIX exporters to send near-65535-...

EUVD-2026-117084

CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping uint16t message length counters. Attackers can send near-65535-byte data sets and large templates to a...