Logo
Retour à la veille

CVE-2026-78049

Publié : 22 août 2026
Modifié : 22 août 2026
Lien officiel NVD
Score CVSS
3.7
LOW

Description détaillée

A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPC_NodeMgtHelperInternal_AddVariableNodeAttributes of the file src/ClientServer/address_space/internal/sopc_node_mgt_helper_internal.c of the component AddNodes Service. The manipulation of the argument UserAccessLevel leads to out-of-bounds read. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is aafbd37d381b618312ebdf5ddf57027f62c14fdd. It is suggested to install a patch to address this issue.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Références et Patchs

https://github.com/user-attachments/files/29702766/PoC.ziphttps://gitlab.com/systerel/S2OPC/-/commit/aafbd37d381b618312ebdf5ddf57027f62c14fddhttps://gitlab.com/systerel/S2OPC/-/merge_requests/1826https://gitlab.com/systerel/S2OPC/-/work_items/1787https://vuldb.com/cve/CVE-2026-78049https://vuldb.com/submit/881262https://vuldb.com/vuln/394290https://vuldb.com/vuln/394290/cti

Dernières Vulnérabilités

CVE-2026-78051

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of the component Cookie File Handler. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2026.06.20 is sufficient to resolve this issue. Patch name: ce897ee00903bf7ded406f0d7852d95dd4164add. You should upgrade the affected component.

VOIR DÉTAILS

CVE-2026-78050

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub_41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone of the component Web Management. The manipulation of the argument timestr/ntp_client_enabled results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used.

VOIR DÉTAILS

CVE-2026-5723

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

VOIR DÉTAILS