| CVE-2026-114408 |
NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full
|
8.7
Élevée
|
2 nov. 2026 |
| CVE-2026-106465 |
Missing HelloVerifyRequest cookie validation in the NetX Secure DTLS server
|
6.9
Moyenne
|
14 oct. 2026 |
| CVE-2026-106464 |
Out-of-bounds read via an empty signature BIT STRING in NetX Secure X.509 parsing
|
8.7
Élevée
|
14 oct. 2026 |
| CVE-2026-102730 |
Out-of-bounds Write via NAND Metadata Parsing at Mount in LevelX
|
8.6
Élevée
|
29 sept. 2026 |
| CVE-2026-102727 |
FTP Passive Data Connection Not Bound to the Authenticated Control Peer
|
6.0
Moyenne
|
29 sept. 2026 |
| CVE-2026-102728 |
Out-of-bounds reads in NetX Secure client-side handshake parsing (ServerHello and HelloVerifyRequest)
|
6.3
Moyenne
|
29 sept. 2026 |
| CVE-2026-102726 |
Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read
|
7.1
Élevée
|
29 sept. 2026 |
| CVE-2026-102725 |
Out-of-bounds Read from Unvalidated MSRP Attribute List Length
|
7.1
Élevée
|
29 sept. 2026 |
| CVE-2026-102724 |
NULL pointer dereference when evicting the last MSRP attribute in a participant's list
|
7.1
Élevée
|
29 sept. 2026 |
| CVE-2026-102723 |
NULL Pointer Dereference on MSRP Attribute Table Exhaustion
|
7.1
Élevée
|
29 sept. 2026 |
| CVE-2026-102722 |
The FTP client trusts arbitrary IP addresses in the PASV server response
|
6.9
Moyenne
|
29 sept. 2026 |
| CVE-2026-102721 |
TFTP client and server copy the ERROR packet message without bounding the read against the packet
|
6.9
Moyenne
|
29 sept. 2026 |
| CVE-2026-102720 |
DHCP client option walk drifts one byte per skipped option, reading past the received message and past the saved options buffer
|
5.3
Moyenne
|
29 sept. 2026 |
| CVE-2026-102719 |
NetX Secure DTLS server issues predictable HelloVerifyRequest cookies, so a spoofed client can pass the return-routability check
|
6.3
Moyenne
|
29 sept. 2026 |
| CVE-2026-102718 |
Out-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER length
|
8.7
Élevée
|
29 sept. 2026 |
| CVE-2026-102716 |
A malformed Session header permanently orphans one packet-pool block per RTSP request
|
8.7
Élevée
|
29 sept. 2026 |
| CVE-2026-102715 |
mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packet
|
7.1
Élevée
|
29 sept. 2026 |
| CVE-2026-102714 |
ICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option walkers past the packet or into a permanent loop
|
7.1
Élevée
|
29 sept. 2026 |
| CVE-2026-102713 |
Unbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stall
|
8.3
Élevée
|
29 sept. 2026 |
| CVE-2026-102712 |
Out-of-bounds read in the NetX Secure DTLS ClientHello parser
|
6.3
Moyenne
|
29 sept. 2026 |