862 matches found
OESA-2026-3038 NetworkManager security update
NetworkManager attempts to keep an active network connection available at all times. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHC...
dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
CVE-2026-62948
OpenWrt odhcpd/LuCI vulnerability CVE-2026-62948: Before 25.12.5, the DHCPv6 client FQDN option 39 hostname is written into /tmp/odhcpd.leases without escaping, allowing newline injection of forged lease lines. LuCI displays these lines in the Active DHCPv6 Leases page via rpcd-mod-luci getDHCPLe...
EUVD-2026-44117
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
EUVD-2026-43798
Integer underflow wrap or wraparound in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-49181
Integer underflow wrap or wraparound in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-48564
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network...
CVE-2026-58627
CVE-2026-58627 is a Windows DHCP Server Denial of Service vulnerability caused by uncontrolled resource consumption that allows a remote attacker to deny service over a network. Affected: Windows DHCP Server. Impact: availability loss (high). Mitigation: Microsoft has released updates and guidanc...
CVE-2026-56159
CVE-2026-56159 is a heap-based buffer overflow in Windows DHCP Server that can allow an unauthenticated attacker to execute code over a network (remote code execution). The vulnerability is rated CRITICAL with Network attack vector and no explicit exploit details in the provided documents. Connec...
EUVD-2026-44234
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
EUVD-2026-44149
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally...
CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability
...
CVE-2026-50370
CVE-2026-50370 is a heap-based buffer overflow in the Windows DHCP Server service that could allow an unauthenticated attacker on an adjacent network to execute code. The vulnerability is listed among the July 2026 Patch Tuesday disclosures and is included in Microsoft’s security updates (KB50995...
CVE-2026-50370 DHCP Server Service Remote Code Execution Vulnerability
...
CVE-2026-50370 DHCP Server Service Remote Code Execution Vulnerability
...
CVE-2026-49181 Windows DHCP Client Elevation of Privilege Vulnerability
...
CVE-2026-48564 DHCP Server Service Remote Code Execution Vulnerability
...
CVE-2026-48564 DHCP Server Service Remote Code Execution Vulnerability
...
EUVD-2026-43686
A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may ...
