CVE-2026-71265

CVE-2026-71265: Domoticz MochadTCP::MatchLine() for MOCHAD_RFSEC messages copies up to 1028 bytes from m_mochadbuffer into a fixed 50-byte tempRFSECbuf using strcpy() without length checks, across three device branches (DS10A/KR10A/MS10A). An attacker on the local network that can reach the Mocha...