PT-2026-126370

REDAXO before 5.21.3 contains a reflected cross-site scripting vulnerability in the backend media pool detail page, where the opener link parameter is rendered without HTML escaping. Unauthenticated attackers can lure logged-in backend users with media permissions into clicking a crafted link. Th...

CVE-2026-75352

A flaw was found in OpENer. An integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser allows a remote attacker to send specially crafted network requests. Exploitation of this flaw can cause the service to crash, resulting in a Denial of Service DoS...

CVE-2026-75353

A flaw was found in OpENer. An out-of-bounds read vulnerability in the server-side EtherNet/IP ForwardOpen connection-path parser allows a remote attacker to cause a Denial of Service DoS. By sending specially crafted connection requests, an attacker can trigger an invalid memory read that crashe...

CVE-2026-75351

A flaw was found in OpENer. An out-of-bounds read vulnerability in the server-side EtherNet/IP ForwardOpen connection-path parser allows a remote attacker to trigger an application crash. By sending a specially crafted connection request, an attacker can exploit this flaw to cause a Denial of...

CVE-2026-75353

OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to cause a denial of service...

CVE-2026-75351

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...

CVE-2026-75352

OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...

CVE-2026-75350

A flaw was found in OpENer. A remote attacker can trigger a buffer overflow in the GetAttributeList function by sending specially crafted EtherNet/IP service requests. Successful exploitation can crash the application, resulting in a Denial of Service DoS...

CVE-2026-75350

EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList implementation for the EtherNet/IP GetAttributeList service. This allows a remote attacker to cause a denial of service...

CVE-2026-75347

EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format CPF handling logic. This allows a remote attacker to cause a denial of service...

CVE-2026-75346

A flaw was found in OpENer. An out-of-bounds read vulnerability in the server-side Common Industrial Protocol CIP SetAttributeList service allows a remote attacker to cause a Denial of Service DoS. By sending specially crafted network requests, an attacker can trigger an invalid memory read,...

CVE-2026-75349

A flaw was found in OpENer. An out-of-bounds read vulnerability exists within the Connection Manager component during request parsing. A remote attacker could exploit this flaw by sending specially crafted network requests, causing the application to crash and leading to a denial of service DoS...

CVE-2026-75348

A flaw was found in opener. An out-of-bounds read vulnerability exists in the Common Packet Format CPF parser when processing network packets. By sending a specially crafted request containing incomplete socket address information, a remote attacker can cause the application to crash, resulting i...

CVE-2026-75345

A flaw was found in OpENer. An out-of-bounds read vulnerability in the handling of unconnected explicit messages allows an unauthenticated remote attacker to cause a Denial of Service DoS. By sending specially crafted network requests, an attacker can trigger reads past allocated buffer boundarie...

CVE-2026-75346

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service...

CVE-2026-75345

OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a remote attacker to cause a denial of service...

CVE-2026-75349

EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing. This allows a remote attacker to cause a denial of service...

CVE-2026-75348

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure when it parses recognized optional socket address information items of type...

PT-2026-109299

OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to cause a denial of service...

EUVD-2026-95902

EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing. This allows a remote attacker to cause a denial of service...