CVE-2026-19933: DefaultFuction Customer-Relationship-Management-In-C-Project Customer Search gets stack-based overflow
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project confirms, that "it’s being processed".
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19933?
The severity of CVE-2026-19933 is rated as medium with a CVSS score of 6.3.
How do I fix CVE-2026-19933?
To fix CVE-2026-19933, it is recommended to update to the latest version of the DefaultFuction Customer-Relationship-Management-In-C-Project software.
What type of vulnerability is CVE-2026-19933?
CVE-2026-19933 is categorized as a buffer overflow vulnerability.
Can CVE-2026-19933 be exploited remotely?
Yes, CVE-2026-19933 can be exploited remotely due to the nature of the attack targeting the Customer Search Module.
What impact does CVE-2026-19933 have on the system?
CVE-2026-19933 may lead to a stack-based buffer overflow, potentially allowing attackers to execute arbitrary code.