CVE-2026-71265: Stack-based Buffer Overflow

Domoticz's MochadTCP::MatchLine handler for MOCHADRFSEC messages hardware/MochadTCP.cpp copies network-received data from the up-to-1028-byte mmochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy with no length check, across three separate code branches DS10A/KR10A/MS10A devic...

PT-2026-68138

Name of the Vulnerable Software and Affected Versions Domoticz affected versions not specified Description The MochadTCP::MatchLine function in the hardware/MochadTCP.cpp file fails to perform length checks when copying data from the m mochadbuffer up to 1028 bytes into a fixed 50-byte stack buff...