CVE-2026-76590

A stack-based buffer overflow exists in the ssi component of TRENDnet TEW-755AP (firmware up to 20260702). Manipulating the cameo.wan.wan_pppoe_password_00 argument in /cgi-bin/wan.cgi triggers overflow, exploitable remotely with low privileges; a public PoC is available at https://github.com/mei...

CVE-2026-76584

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...

CVE-2026-76004 UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argument pvid leads to stack-based buffer overflow. It is...

CVE-2026-75877

TRENDnet TV-IP751WIC firmware 11.03.03 is vulnerable in the alphapd component across multiple functions (SystemNetworkChanged, SystemDDNSChanged, SystemEmailChanged, SystemFTPChanged, websCheckRealm, FUN_00432574, FUN_0043372C), allowing remote stack-based buffer overflow. CVSS 3.1 scores 9.9 (CR...

EUVD-2026-59997

A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made...

PT-2026-76602

A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export pingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTP COOKIE can lead to...

Security Bulletin: This Power System update is being released to address CVE-2026-17093

Summary Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level access to the BMC/FSP can supply specially crafted configuration data, compromising the host firmware boot stage and everything subsequently loaded by it, resulting...

Security Bulletin: This Power System update is being released to address CVE-2026-18871

Summary Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory...

Security Bulletin: This Power System update is being released to address CVE-2026-16832

Summary Power Systems Firmware is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service processor, giving full control over the managed system, resulting in a confidentiality, integrity...

MINI-WRX3-P8VV-RJHX

Bulletin has no description...

CVE-2026-19846 TOTOLINK A800R firewall.so cstecgi.cgi setUrlFilterRules stack-based overflow

A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...

EUVD-2026-58735

A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...

CVE-2026-19815

TOTOLINK A800R (firmware 4.1.2cu.5137_B20200730) is affected by a stack-based buffer overflow in the firewall.so component, via the setParentalRules function in /cgi-bin/cstecgi.cgi. Manipulating the urlKeyword argument can be exploited remotely; exploits have been published. CVSS metrics indicat...

CVE-2026-19790 Tenda G0 httpd Web Management module formSetPortMirror stack-based overflow

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

PT-2026-71955

Name of the Vulnerable Software and Affected Versions Tenda AC1206 version 15.03.06.23 multi TD01 Description A stack-based buffer overflow exists in the httpd web management interface. The issue occurs within the set device name function located in the '/goform/SetOnlineDevName' endpoint when th...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the argument name matching process. An attacker can cause unauthorized memory modification and potentially disrupt server operation by supplying specially crafted OUT parameter counts. Remediation Upgrade...

EUVD-2026-57191

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...

CVE-2024-14042

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hssogsdiams6aaircb/hssogsdiams6aulrcb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is possible to...

Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-70618

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...