CVE-2026-76070: Stack-based Buffer Overflow

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...

PT-2026-80908

Name of the Vulnerable Software and Affected Versions Netis NC63 versions prior to V3.0.0.3327 Description An issue exists where unauthenticated remote attackers can overwrite the saved stack state by providing an oversized destHost parameter to the ipFilterList=mod action in the 'netis.cgi'...

PT-2026-81065

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.13 Description OpenEXR is the reference implementation and specification for the EXR image format. A crafted HTJ2K-compressed EXR image can cause a crash during the normal decode process. This occurs when the...

CVE-2026-78169: Stack-based Buffer Overflow

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

CVE-2026-76071: Stack-based Buffer Overflow

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf...

CVE-2025-36939: Stack-based Buffer Overflow

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow...

CVE-2026-75368

A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...

CVE-2026-75368

A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...

PT-2026-80969

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description A buffer overflow exists in the webBackupAction function. This issue occurs due to repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack...

EUVD-2026-65115

A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2026-81022

Name of the Vulnerable Software and Affected Versions SpaceDot AcubeSAT OBC software commit eaf90ec Description A stack overflow occurs in the loadRawData function when processing a specially crafted ECSS TC message. This flaw allows an attacker to trigger a Denial of Service DoS, which is a...

CVE-2026-75368

A stack overflow vulnerability exists in the loadRawData function of the SpaceDot AcubeSAT OBC software (commit eaf90ec ). This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted ECSS TC message . No information regarding specific remediation or exploit availabili...

PT-2026-81075

Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description A stack-based buffer overflow exists in the A2DP Advanced Audio Distribution Profile component of the BlueZ Bluetooth stack. This flaw allows for remote code execution. Recommendations At the...

PT-2026-80907

Name of the Vulnerable Software and Affected Versions Netis NC63 versions prior to V3.0.0.3327 Description A stack-based buffer overflow exists in the login handler of the '/bin/netis.cgi' endpoint. The issue occurs because the custom Base64 decoder fails to validate the output length against a...

CVE-2026-75368

A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...

PT-2026-80924

Name of the Vulnerable Software and Affected Versions OpenThread affected versions not specified Description Multiple issues exist in the handling of Mesh Link Establishment MLE packets. An authenticated attacker on the same Thread network can send specially crafted packets to cause a denial of...

PT-2026-79806

Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description An issue exists in the HTTP Request Handler component where a stack-based buffer overflow occurs. This happens when the strcpy function in the '/goform/aspRemoteApConfTempSend'...

ImageMagick Buffer Overflow DoS

The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

MiracleLinux 9 : 389-ds-base-2.8.0-9.el9_8 (AXSA:2026-1635:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1635:06 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereferen...