CVE-2026-110673

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not...

CVE-2026-110673

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not...

CVE-2026-105810 Authenticated Local Stack Overflow in TP-Link Tapo C320WS

Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands wit...

CVE-2026-105810

The TP-Link Tapo C320WS V2.0 is vulnerable to an authenticated stack-based buffer overflow within the local onboarding Wi-Fi configuration path. An authenticated attacker located on the adjacent network can submit a crafted request featuring an oversized encrypted password field to overwrite the ...

EUVD-2026-104523

Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands wit...

CVE-2026-105810 Authenticated Local Stack Overflow in TP-Link Tapo C320WS

Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands wit...

CLSA-2026-1791487799 httpd: Fix of 2 CVEs

CVE-2026-63292: modvhostalias: stack buffer overflow when a single Host header segment exceeds HUGESTRINGLEN; reject the expansion...

CVE-2026-98528

A flaw was found in the Linux kernel's GPIO General Purpose Input/Output character device interface. This vulnerability allows a local user to cause an information disclosure of sensitive kernel stack data. When an error occurs while querying GPIO line details, the kernel fails to clear the data...

CVE-2026-110261

A flaw was found in OW2 ASM. An attacker can supply a specially crafted class file to an application that analyzes or transforms bytecode with automatic stack map frame computation enabled. This causes an internal computation algorithm to take an excessive amount of time to complete, consuming hi...

CVE-2026-12665

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...

CVE-2026-12665

IBM MQ is vulnerable to a stack buffer overflow during channel connection establishment. The flaw occurs when the system processes TLS certificates containing malformed distinguished names or format errors. This vulnerability could allow a remote attacker to achieve arbitrary code execution . Aff...

EUVD-2026-104465

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...

CVE-2026-12665 IBM MQ Buffer Overflow

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...

CVE-2026-112368

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

DEBIAN-CVE-2026-112368

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability, which stems from an stack buffer overflow in the MCLI function. This vulnerability could allow attackers to execute arbitrary code through specially crafted HTTP requests...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer error vulnerability. This vulnerability stems from a stack buffer overflow, which may allow remote authenticated attackers to execute arbitrary code...

TOTOLINK X2000R Buffer Error Vulnerability

TOTOLINK X2000R V1.0.0-B20250421.1327 version has a buffer overflow vulnerability. This vulnerability stems from an stack buffer overflow in the vpnUser parameter of the boa formFilter function. It may allow authenticated attackers to execute arbitrary code through specially crafted HTTP requests...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the login function, which could allow attackers to execute arbitrary code...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from the static network configuration feature of boa formIpv6Setup, where the staticdns1 parameter involves a stack buffer overflow. Attackers can exploit this vulnerability through authenticated HTTP requests,...