CVE-2026-7840

creationtimestamp| type| source ---|---|--- 2026-07-03 02:25:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mppilesqv727 2026-07-09 11:43:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7klorntc2s...

CVE-2026-7840 UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)

UltraVNC repeater through 1.8.2.2 contains a global buffer overflow in its embedded HTTP administration server. The functions wisenderr and wireplyhdr in repeater/webgui/webutils.c write the caller-supplied HTTP request URI into a fixed 1000-byte global buffer hdrbuf via unchecked sprintf calls...