9.8
Critical
CVE-2026-22904 Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote…
Description
Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attacker to send oversized cookie values and trigger a stack buffer overflow, resulting in a denial‑of‑service condition and possible remote code execution.
Affected products and versions
Other CVEs of 0852-1322
The 4 CVEs of 0852-1322 →
CVE-2026-22906
User credentials are stored using AES‑ECB encryption with a hardcoded key
9.8
Critical
CVE-2026-22905
An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path…
7.5
High
CVE-2026-22903
An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie
9.8
Critical