2431 matches found
CVE-2026-85234
A flaw in tftp-hpa 's in.tftpd remap engine can trigger out-of-bounds read/write operations when an inverse remap rule that also aborts with a non-empty custom error message passes invalid match offsets to the genmatchstring() function. A remote, unauthenticated attacker can send a specially craf...
CVE-2026-85234
A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...
CVE-2026-85234
A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...
PT-2026-92190
Name of the Vulnerable Software and Affected Versions tftp-hpa affected versions not specified Description A flaw exists in the in.tftpd remap engine. When processing an inverse remap rule that aborts with a non-empty custom error message, the engine may pass invalid match offsets to the...
CVE-2026-85234: Out-of-bounds Read
A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...
Linux Distros Unpatched Vulnerability : CVE-2026-85234
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass...
CVE-2026-89020
MikroTik RouterOS before 7.23.4 long-term and 7.24.2 stable contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 507 bytes or more to the /tool fetch comman...
EUVD-2026-77756
MikroTik RouterOS before 7.23.4 long-term and 7.24.2 stable contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 507 bytes or more to the /tool fetch comman...
CVE-2026-89020 MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path
MikroTik RouterOS before 7.23.4 long-term and 7.24.2 stable contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 507 bytes or more to the /tool fetch comman...
CVE-2026-89020
MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) is affected by a stack-based buffer overflow in the mtget binary's TFTP RRQ builder function. An authenticated user with read-only group membership can issue a /tool fetch command with a crafted tftp:// URL path of 507 bytes or more ...
Astra Linux – Vulnerability in libssh
In libssh 0.9.4, there is a NULL pointer dereferencing in tftpserver.c if sshbuffernew returns NULL...
Astra Linux – Vulnerability in libslirp
An invalid pointer initialization issue was discovered in the SLiRP networking implementation of QEMU. The flaw resides in the tftpinput function and can occur when processing an UDP packet that is smaller than the size of the ‘tftpt’ structure. This issue may lead to out-of-bounds read access or...
PT-2026-91400
Name of the Vulnerable Software and Affected Versions RouterOS versions prior to 7.23.4 long-term RouterOS versions prior to 7.24.2 stable Description A stack-based buffer overflow exists in the TFTP RRQ builder function of the mtget binary. Authenticated users with read-only group membership can...
CVE-2026-89020: Stack-based Buffer Overflow
MikroTik RouterOS before 7.23.4 long-term and 7.24.2 stable contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 507 bytes or more to the /tool fetch comman...
The vulnerability of the TFTP server of the Windows Deployment Services service allows a hacker to execute arbitrary code.
The vulnerability of the TFTP server of the Windows Deployment Services service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2026-80965
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp upgrade function. The vulnerability is caused by insufficient filtering before the filename field is concatenated into a command. A remote attacker can trigger this vulnerability via crafted input to execute...
Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for August 2026, which includes 421 vulnerabilities affecting a range of products, including 62 that Microsoft marked as "critical." Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-68820...
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
...
CVE-2026-62893
CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...