CVE-2026-66086Critical· 9.8▾ MidnightIn the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution pri…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-0719High· 8.6A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication
CVE-2025-58776High· 7.8KV Studio versions 12.23 and prior contain a stack-based buffer overflow vulnerability
CVE-2025-59149Medium· 6.2Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community
CVE-2026-108892Critical· 10.0A vulnerability was determined in Linksys E1700 1.0.0.4.003
CVE-2026-108893Critical· 9.9A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003
CVE-2026-104115NoneA stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon