CVE-2026-129122

C-Kermit versions 6.0.192 before 11.1.515 are vulnerable to a buffer overflow in the tn_snenv() function within ckctel.c. This flaw occurs when a malicious or machine-in-the-middle Telnet server sends oversized variable names during a NEW-ENVIRON SEND subnegotiation before authentication. The vul...

EUVD-2026-125557

C-Kermit 6.0.192 before 11.1.515 contains a buffer overflow vulnerability in tnsnenv in ckctel.c that allows malicious Telnet servers to corrupt client memory via crafted NEW-ENVIRON SEND subnegotiation. Malicious or machine-in-the-middle servers can send oversized variable names before...