CVE-2026-15722

The CVE-2026-15722 entry concerns a pre-authentication stack buffer overflow in 389-ds-base. The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking, allowing a remote unauthentic...

CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

CVE-2026-15722

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

CVE-2026-15722

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

CVE-2026-43833

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43829

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43833

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43833

Technical details for CVE-2026-43833 are currently restricted and not publicly available in the provided documents. However, one source indicates that an authenticated attacker could potentially exploit a stack-based buffer overflow in the upload functionality to conduct code execution . Monitor ...

CVE-2026-43832 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51389

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43832

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43829

CVE-2026-43829 describes a stack-based buffer overflow within the password functionality of an unspecified software component. Successful exploitation could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled. While most documents state that ful...

CVE-2026-43829 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51385

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43829

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-67822

Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...

EUVD-2026-51587

Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...

CVE-2026-67822

Tenda W6-S 1.0.0.4510 contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow...