CVE-2026-19814 TOTOLINK A800R firewall.so cstecgi.cgi setMacQos stack-based overflow

A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected is the function setMacQos of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Performing a manipulation of the argument macAddress results in stack-based buffer overflow. It is possible to initiate the attac...

CVE-2026-73078

creationtimestamp| type| source ---|---|--- 2026-08-12 13:45:54+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-vim-1 2026-08-13 09:10:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxccuthbg2f...

CVE-2026-68816

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-70645

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

CVE-2017-20242

CVE-2017-20242 affects Keysight IxChariot Endpoint prior to 9.5.102. The vulnerability is a stack-based buffer overflow in the endpoint, exploitable by an unauthenticated remote attacker over the network via a specially crafted packet, potentially crashing the endpoint or allowing arbitrary code ...

CVE-2026-18589

The CVE-2026-18589 entry concerns Wavlink WL-NU516U1 (model 708c073-mt7628). The vulnerability is in nas.cgi, affecting the change_password function where manipulating User1Passwd triggers a stack-based buffer overflow. It is a NETWORK-accessible flaw with LOW attack complexity and NO user intera...

CVE-2026-43831

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43833 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43832

CVE-2026-43832 has connected details from PT-2026-66674 describing a stack-based buffer overflow in the Cookie parsing methods that could allow code execution when the SafeEnhancement feature is enabled. The exploitation is described as unauthenticated. No remediation steps or affected product ve...

EUVD-2026-51387

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

CVE-2026-43831 has a connected PT-2026-66673 entry describing a stack-based buffer overflow in the log message functionality that can be exploited by an unauthenticated attacker to achieve code execution. The initial documents provide a CVSSv3.1 base score of 7.5 (HIGH) with network attack vector...

PT-2026-65025

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network...

PT-2026-64300

Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.17 Loytec L-INX versions prior to 8.4.17 Loytec L-GATE versions prior to 8.4.17 Loytec L-ROC versions prior to 8.4.17 Loytec L-IOB versions prior to 8.4.17 Loytec L-DALI versions prior to 8.4.17 Loytec...

CVE-2026-50039

The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request...

CVE-2026-50039

CVE-2026-50039 affects libIEC61850 MMS value cache (v1.0.0 through v1.6.1). The vulnerability is a stack-based overflow via an unbounded copy, leading to DoS. The issue is pre-auth in the MMS value cache path and can be triggered by a network request that causes an overflow in the affected compon...

PT-2026-64172

Name of the Vulnerable Software and Affected Versions MZ Automation libIEC61850 affected versions not specified Description The software is susceptible to a stack-based buffer overflow, a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to...

CVE-2026-48389

The CVE-2026-48389 entry concerns the DNG SDK prior to or equal to version 1.7.1 2536, which is affected by a stack-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The ...

CVE-2026-16277

A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with rpcinfo -l, address information returned by the server is copied into a fixed-size buffer without sufficient bounds checking. A malicious or compromised rpcbind server could use this...

EUVD-2026-45950

A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with rpcinfo -l, address information returned by the server is copied into a fixed-size buffer without sufficient bounds checking. A malicious or compromised rpcbind server could use this...

CVE-2026-16248

The CVE concerns Tenda AC10 (16.03.10.09_multi_TDE01) where the fromAdvSetLanip function in httpd/netctrl (file /goform/AdvSetLanip) is vulnerable. Specifically, manipulating GetValue/SetValue can trigger a stack-based buffer overflow. The issue is exploitable remotely, and public exploits have b...