PT-2026-76602

A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export pingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTP COOKIE can lead to...

Security Bulletin: This Power System update is being released to address CVE-2026-17093

Summary Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level access to the BMC/FSP can supply specially crafted configuration data, compromising the host firmware boot stage and everything subsequently loaded by it, resulting...

Security Bulletin: This Power System update is being released to address CVE-2026-18871

Summary Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory...

Security Bulletin: This Power System update is being released to address CVE-2026-16832

Summary Power Systems Firmware is affected by a vulnerability in the FSP management network protocol. An attacker with authenticated HMC administrator access can execute arbitrary code on the service processor, giving full control over the managed system, resulting in a confidentiality, integrity...

MINI-WRX3-P8VV-RJHX

Bulletin has no description...

CVE-2026-19846 TOTOLINK A800R firewall.so cstecgi.cgi setUrlFilterRules stack-based overflow

A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...

EUVD-2026-58735

A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...

CVE-2026-19815

TOTOLINK A800R (firmware 4.1.2cu.5137_B20200730) is affected by a stack-based buffer overflow in the firewall.so component, via the setParentalRules function in /cgi-bin/cstecgi.cgi. Manipulating the urlKeyword argument can be exploited remotely; exploits have been published. CVSS metrics indicat...

CVE-2026-19790 Tenda G0 httpd Web Management module formSetPortMirror stack-based overflow

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

PT-2026-71955

Name of the Vulnerable Software and Affected Versions Tenda AC1206 version 15.03.06.23 multi TD01 Description A stack-based buffer overflow exists in the httpd web management interface. The issue occurs within the set device name function located in the '/goform/SetOnlineDevName' endpoint when th...

EUVD-2026-57191

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...

CVE-2024-14042

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hssogsdiams6aaircb/hssogsdiams6aulrcb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is possible to...

Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-70618

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

PT-2026-58559

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Microsoft SharePoint affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is...

PT-2026-58716

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized attacker t...

CVE-2026-40399

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

EUVD-2026-19150

A vulnerability has been found in Belkin F9K1015 1.00.10. Affected by this issue is the function formWISP5G of the file /goform/formWISP5G. Such manipulation of the argument webpage leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed ...

Vulnerabilities fixed in Adobe Illustrator

Adobe has fixed vulnerabilities in Adobe Illustrator versions 29.8.4, 30.1 and earlier. The vulnerabilities are in how Adobe Illustrator processes specially crafted files. This includes an Untrusted Search Path vulnerability, an out-of-bounds write vulnerability, a stack-based buffer overflow...

Security update for libsoup (important)

openSUSE security update: security update for libsoup ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20142-1 Rating: important References: bsc1250562 bsc1256399 bsc1256418 Cross-References: CVE-2025-11021 CVE-2026-0716 CVE-2026-0719 CVSS scores:...