CVE-2026-15722

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

CVE-2026-15722

The CVE-2026-15722 entry concerns a pre-authentication stack buffer overflow in 389-ds-base. The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking, allowing a remote unauthentic...

CVE-2026-15722

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

H3C Magic R300-2100M - Remote Code Execution

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. id: CVE-2023-33629 info: name: H3C Magic R300-2100M - Remote Code Execution author: DhiyaneshDK severity: high description: | H3C Magic R300 version...

CVE-2026-43833

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43829

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43833

CVE-2026-43833 has corroborating detail in PT-2026-66675 describing a stack-based buffer overflow in the upload functionality that enables code execution by an authenticated attacker. The available information does not name affected products or versions, nor provide a patch or workaround. Exploit...

CVE-2026-43833

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43832 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43832

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51389

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43829 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43829

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43829

CVE-2026-43829: Connected PT-2026-66671 documents a stack-based buffer overflow in the password functionality that enables code execution when the SafeEnhancement feature is enabled. The affected product/vendor/component is not explicitly named in the provided sources. The description states an u...

EUVD-2026-51385

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-7260 Stack overflow in phar with circular symlinks

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

CVE-2026-7260

The CVE affects PHP’s phar handling, where circular symbolic links in phar archives can cause unbounded recursion, exhausting the C stack and crashing the PHP process. Affected versions are PHP 8.2.x before 8.2.33, 8.3.x before 8.3.33, 8.4.x before 8.4.24, and 8.5.x before 8.5.9. Root cause is un...

CVE-2026-7260 Stack overflow in phar with circular symlinks

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...