CVE-2026-10829: Buffer Overflow
A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of user-supplied input in the "Server location" parameter on the Basic settings page. An attacker could exploit this vulnerability by sending crafted input to the web service, resulting in memory corruption. Successful exploitation of this vulnerability could allow remote code execution on the target system with root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
NPort W2150A-W4/W2250A-W4 Seriesto a version that resolves this vulnerability.Patch mpsa-261910
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10829?
CVE-2026-10829 has a high severity rating of 8.6 on the CVSS scale.
How do I fix CVE-2026-10829?
To remediate CVE-2026-10829, upgrade the NPort W2150A-W4/W2250A-W4 Series to version 1.6 or later.
What systems are affected by CVE-2026-10829?
CVE-2026-10829 affects the NPort W2150A-W4 and W2250A-W4 Series devices running version 1.5 or earlier.
What type of vulnerability is CVE-2026-10829?
CVE-2026-10829 is a stack-based buffer overflow vulnerability that results from insufficient input validation.
What could an attacker potentially do with CVE-2026-10829?
An attacker could exploit CVE-2026-10829 to execute arbitrary code or crash the affected device.