CVE-2026-25823: Buffer Overflow
HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have a stack buffer overflow that leads to a Denial of Service, which can also be exploited to achieve Unauthenticated Remote Code Execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-25823?
CVE-2026-25823 has a critical severity rating of 9.8 based on CVSS 3.1.
How do I fix CVE-2026-25823?
To fix CVE-2026-25823, update the firmware of Ewon Flexy to version 15.0s4 or later, and Cosy+ to version 22.1s6 or later for 22.xx models, or to 23.0s3 or later for 23.xx models.
What is the risk associated with CVE-2026-25823?
CVE-2026-25823 poses a risk score of 86, indicating a significant potential for exploitation.
What types of devices are affected by CVE-2026-25823?
CVE-2026-25823 affects HMS Networks Ewon Flexy devices and Cosy+ devices with specific firmware versions.
What kind of vulnerability is CVE-2026-25823?
CVE-2026-25823 is a stack buffer overflow vulnerability that can lead to Denial of Service and unauthorized remote code execution.