CVE-2026-71265: Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy()
Domoticz's MochadTCP::MatchLine() handler for MOCHADRFSEC messages (hardware/MochadTCP.cpp) copies network-received data from the up-to-1028-byte mmochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy() with no length check, across three separate code branches (DS10A/KR10A/MS10A device types). An attacker on the local network segment able to reach the Mochad TCP bridge (default port 1099, no authentication) can send a crafted packet that overflows tempRFSECbuf by up to several hundred bytes, corrupting the Domoticz worker thread's stack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-71265?
CVE-2026-71265 has a high severity score of 7.5.
How do I fix CVE-2026-71265?
To fix CVE-2026-71265, update to the latest version of Domoticz where the buffer overflow vulnerability has been addressed.
What kind of vulnerability is CVE-2026-71265?
CVE-2026-71265 is a stack buffer overflow vulnerability in the Domoticz MochadTCP handler.
What are the potential impacts of CVE-2026-71265?
CVE-2026-71265 can lead to remote code execution or system crashes due to the buffer overflow.
Which component is affected by CVE-2026-71265?
CVE-2026-71265 affects the MochadTCP::MatchLine() function in the Domoticz software.