EUVD-2026-125553

C-Kermit before 11.1.515 contains a heap buffer overflow vulnerability in putsrv in ckcfns.c that allows malicious peers to write past the srvcmd buffer by sending crafted packets. Attackers can use Kermit repeat-count compression in server command, GET, or file-header packets to write...

CVE-2026-129126

C-Kermit versions prior to 11.1.515 are susceptible to a heap buffer overflow in the putsrv() function within ckcfns.c. The vulnerability occurs during packet decoding when malicious peers send crafted packets utilizing kermit repeat-count compression in server command, GET, or file-header packet...