CVE-2026-76888

Wireshark 's RDP protocol dissector can crash when processing crafted traffic, leading to denial of service . The vulnerability affects versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18 . The CNA (GitLab) assigns a CVSS 3.1 score of 3.1 (Low) with high attack complexity and required user inte...

CVE-2026-76888 Heap-based Buffer Overflow in Wireshark

RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76887 Heap-based Buffer Overflow in Wireshark

Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76887

A heap-based buffer overflow in the Wireshark dissection engine affects versions 4.6.0–4.6.7 and 4.4.0–4.4.18 , allowing a remote attacker to cause a denial of service by tricking a user into processing a specially crafted network packet. No confidentiality or integrity impact is indicated. The N...

CVE-2026-76886 Heap-based Buffer Overflow in Wireshark

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76886

CVE-2026-76886 is a crash in the C12.22 protocol dissector of Wireshark , affecting versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18 . The vulnerability allows a remote, unauthenticated attacker to cause a denial of service (crash) by sending crafted C12.22 protocol traffic. The NVD assigns ...

CVE-2026-76883 Heap-based Buffer Overflow in Wireshark

Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76883

The Catapult DCT2000 file parser in Wireshark 4.6.0–4.6.7 and 4.4.0–4.4.18 crashes on malformed input, causing denial of service. CVSS 4.7 (local, high complexity). No in-the-wild exploitation reported; upgrade to patched versions. See wireshark.org/security/wnpa-sec-2026-74.html and gitlab.com/w...

CVE-2026-76590

A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...

CVE-2026-76589

A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2026-76590 TRENDnet TEW-755AP ssi wan.cgi stack-based overflow

A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...

CVE-2026-76590

A stack-based buffer overflow exists in the ssi component of TRENDnet TEW-755AP (firmware up to 20260702). Manipulating the cameo.wan.wan_pppoe_password_00 argument in /cgi-bin/wan.cgi triggers overflow, exploitable remotely with low privileges; a public PoC is available at https://github.com/mei...

CVE-2026-76590 TRENDnet TEW-755AP ssi wan.cgi stack-based overflow

A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...

CVE-2026-76589 TRENDnet TEW-755AP mycli FUN_401000 stack-based overflow

A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2026-76589

A stack-based buffer overflow in the FUN_401000 function of /sbin/mycli on TRENDnet TEW-755AP firmware up to 20260702 allows remote attackers to crash or take over the device by sending a crafted ssid argument. A proof-of-concept exploit exists at https://github.com/meishigana/CVE/blob/main/team1...

CVE-2026-76584

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...

CVE-2026-68552

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthenticated remote client can send a STUN message over TCP or TLS with a body-length field from 65520 through 65532, causing the uint16t len variable in stungetmessagelenstr in src/client/nsturnmsg.c to...

DEBIAN-CVE-2026-68552

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthenticated remote client can send a STUN message over TCP or TLS with a body-length field from 65520 through 65532, causing the uint16t len variable in stungetmessagelenstr in src/client/nsturnmsg.c to...

CVE-2026-68552

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthenticated remote client can send a STUN message over TCP or TLS with a body-length field from 65520 through 65532, causing the uint16t len variable in stungetmessagelenstr in src/client/nsturnmsg.c to...

UBUNTU-CVE-2026-68552

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthenticated remote client can send a STUN message over TCP or TLS with a body-length field from 65520 through 65532, causing the uint16t len variable in stungetmessagelenstr in src/client/nsturnmsg.c to...