CVE-2026-49868

The RIOT open-source microcontroller operating system is vulnerable to an unbounded out-of-bounds (OOB) heap read due to a missing minimum-length validation in the _parse_reply() function within sys/net/application_layer/dhcpv6/client.c. If MODULE_DHCPV6_CLIENT_IA_PD is enabled, a malicious or co...

CVE-2026-102693

The RIOT open-source microcontroller operating system is vulnerable to a remote stack buffer overflow in the ATWINC15x0 driver prior to version 2026.04 . The root cause is the use of strcpy within the _atwinc15x0_sta_set_current_ssid function, which copies an SSID without verifying the destinatio...

CVE-2026-102693 RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0stasetcurrentssid function uses strcpy to copy an SSID without checking the destination size. When...

CVE-2026-102692

The RIOT microcontroller operating system contains an integer overflow vulnerability in the nanocoap component prior to version 2026.07 . Specifically, the software fails to enforce a 20-bit maximum block number when handling CoAP Block2 option values. This allows oversized values to pass from co...

CVE-2026-107837

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, receive in sys/net/gnrc/networklayer/sixlowpan/gnrcsixlowpan.c can route an undersized packet into SFF fragment handling after only a minimal payload...

CVE-2026-107836

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoapsockgetslice in sys/net/applicationlayer/nanocoap/sock.c accepts a Block2 response when blockcb sees the expecte...

CVE-2026-107838

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 2023.07 through version 2026.07, nanocoapfileserver callers in sys/net/applicationlayer/nanocoap/fileserver.c ignore a failure returned by respinit when...

CVE-2026-107838 RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 2023.07 through version 2026.07, nanocoapfileserver callers in sys/net/applicationlayer/nanocoap/fileserver.c ignore a failure returned by respinit when...

CVE-2026-107838 RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 2023.07 through version 2026.07, nanocoapfileserver callers in sys/net/applicationlayer/nanocoap/fileserver.c ignore a failure returned by respinit when...

CVE-2026-107838

The RIOT microcontroller operating system (versions 2023.07 through 2026.07 ) is vulnerable to a reachable assertion in the nanocoap_fileserver component. The root cause is that callers in sys/net/application_layer/nanocoap/fileserver.c ignore a failure returned by _resp_init() when coap_build_re...

CVE-2026-107837 RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, receive in sys/net/gnrc/networklayer/sixlowpan/gnrcsixlowpan.c can route an undersized packet into SFF fragment handling after only a minimal payload...

CVE-2026-107837 RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, receive in sys/net/gnrc/networklayer/sixlowpan/gnrcsixlowpan.c can route an undersized packet into SFF fragment handling after only a minimal payload...

CVE-2026-107837

The RIOT open-source microcontroller operating system (versions 2026.07 and earlier ) contains an out-of-bounds read vulnerability in the _receive() function located within sys/net/gnrc/network_layer/sixlowpan/gnrc_sixlowpan.c. The root cause is insufficient validation; the system routes undersiz...

CVE-2026-107836 RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoapsockgetslice in sys/net/applicationlayer/nanocoap/sock.c accepts a Block2 response when blockcb sees the expecte...

EUVD-2026-95931

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoapsockgetslice in sys/net/applicationlayer/nanocoap/sock.c accepts a Block2 response when blockcb sees the expecte...

CVE-2026-107836 RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoapsockgetslice in sys/net/applicationlayer/nanocoap/sock.c accepts a Block2 response when blockcb sees the expecte...

CVE-2026-107836

The RIOT microcontroller operating system (version 2026.07 and earlier ) contains a vulnerability in the nanoCoAP client function nanocoap_sock_get_slice() located in sys/net/application_layer/nanocoap/sock.c. The root cause is a failure to verify that server-controlled szx and derived offsets ma...

CVE-2026-107837: Out-of-bounds Read

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, receive in sys/net/gnrc/networklayer/sixlowpan/gnrcsixlowpan.c can route an undersized packet into SFF fragment handling after only a minimal payload...

c2cciutils (>=1.1.47, <=1.1.58), dai-python-commons (5.4.16) +4 more potentially affected by CVE-2026-102930 via virtualenv (20.26.6)

virtualenv PYPI version 20.26.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - c2cciutils =1.1.47, =0.20.0, =0.20.1 - rosettapy 0.2.3rc181.post1 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

dreem (>=0.0.0, <=0.1.16), riot (>=0.17.2, <=0.18.0) potentially affected by CVE-2026-102930 via virtualenv (20.20.0)

virtualenv PYPI version 20.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dreem =0.0.0, =0.17.2, =0.18.0 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...