CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
RIOT OS ethos Utility Stack-based Buffer Overflow Vulnerability (CVE-2026-22214) Security Advisory
[Affected Scope] ethos utility in RIOT OS versions up to and including 2026.01-devel-317
[Impact] Unauthenticated remote attackers can send crafted serial or TCP-framed input to corrupt memory, leading to application crashes or potential arbitrary code execution
[Mitigation] Apply the latest source code patches, or manually implement bounds checking in the ethos utility's frame parser and rebuild
RIOT OS tapslip6 Utility Stack-based Buffer Overflow Vulnerability (CVE-2026-22213) Security Advisory
[Affected Scope] RIOT OS versions up to and including 2026.01-devel-317 containing the tapslip6 utility
[Impact] Attackers can trigger a stack buffer overflow via crafted command-line arguments, leading to process crashes and potential arbitrary code execution
[Mitigation] Apply the latest source patches, replace unsafe string functions with snprintf, and restrict execution permissions on the tapslip6 binary
Realtek Jungle SDK Remote Code Execution and Command Injection Vulnerability (CVE-2021-35395) Technical Advisory
[Affected Scope] IoT and network devices utilizing Realtek Jungle SDK versions v2.x through v3.4.14B
[Impact] Unauthenticated remote attackers can exploit stack buffer overflows and command injection flaws to execute arbitrary code with root privileges, leading to full device compromise
[Mitigation] Apply the latest firmware updates from the respective device manufacturers and restrict external access to the web management interface
Tenda AC11 Router /goform/setmac Stack Buffer Overflow Remote Code Execution Vulnerability (CVE-2021-31755) Analysis and Mitigation Guide
[Affected Scope] Tenda AC11 wireless routers running firmware versions up to and including 02.03.01.104_CN
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP POST request
[Mitigation] Immediately upgrade to the latest patched firmware version and disable external WAN-side HTTP management interfaces