EUVD-2026-105327

A heap-based buffer overflow vulnerability exists in the boa formUpload functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerabili...

CVE-2026-10136

The Totolink X2000R router (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ) is vulnerable to a heap-based buffer overflow in the boa binary's formUpload() functionality. The root cause is located in the get_filename_from_buf() function, where the length passed to strncpy is derived from the in...

CVE-2026-10137

A stack-based buffer overflow exists in the boa formUpload() functionality of the Totolink X2000R (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ). The vulnerability occurs because the formUpload function fails to perform length checks when using strcpy to copy the value of the devicemac%d HTT...

CVE-2026-10137

A stack-based buffer overflow vulnerability exists in the boa formUpload functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this...

EUVD-2026-105326

A stack-based buffer overflow vulnerability exists in the boa formUpload functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this...

CVE-2026-10139

A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2026-10139

A stack-based buffer overflow vulnerability exists in the Mcli functionality of the Totolink X2000R router (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ). An authenticated attacker can trigger this by sending a specially crafted HTTP request to the /boafrm/formUpload page. The vulnerability ...

EUVD-2026-105324

A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

EUVD-2026-105321

The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC = 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination...

CVE-2026-101103

The PEAK-System PCAN Windows drivers are vulnerable to a classic buffer overflow (CWE-120) within the diagnostic call. The root cause is a failure to validate that the caller-supplied output buffer is large enough to accommodate the output record. This vulnerability can lead to a high availabilit...

EUVD-2026-105316

The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record...

CVE-2025-71436

A flaw was found in raptor2. The library improperly handles language tag lengths when parsing RDF Resource Description Framework documents, truncating lengths that exceed 255 bytes. A remote attacker can exploit this vulnerability by supplying a specially crafted document with an overly long...

Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: CVE-2026-63887: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf bsc1272386. CVE-2026-68158: libceph: Fix multiplication overflow in...

CLSA-2026-1792519677 apr-util: Fix of 2 CVEs

CVE-2026-32327: apr-util: stack recursion crash parsing deeply nested XML in aprxmlquoteelem - CVE-2026-34502: apr-util: heap buffer overflow in the APR memcached client...

openssl: heap buffer overflow in CMS key unwrapping

A flaw was found in OpenSSL. A crafted CMS Cryptographic Message Syntax message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMSdecrypt. This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Securit...

Moderate: Red Hat Security Advisory: fetchmail security update

An update for fetchmail is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01)

A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...

CLSA-2026-1792490933 hplip: Fix of 7 CVEs

CVE-2026-91097: bound LEDM HTTP response copies in httpread of the SANE hpaio backend stack buffer overflow backport of HPLIP 3.26.6 and RHEL c9s - CVE-2026-91098: bound device-supplied data in the LEDM scan backend resolution lists, job Location header, BinaryURL and chunk size parsing...

Important: Red Hat Security Advisory: gvfs security update

An update for gvfs is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...