CVE-2026-86325: Buffer Overflow
A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the web management interface could supply a specially crafted account name that exceeds the size of the internal stack buffer, resulting in corruption of program execution flow. Successful exploitation could allow an attacker to read sensitive information from device memory, including credentials, modify arbitrary memory contents, and disrupt device availability.
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be authenticated to the web management interface as a read-only user. The issue is reachable through account management requests that include an oversized account_name parameter.
What could successful exploitation allow?
Successful exploitation could let the attacker read sensitive information from device memory, including credentials, modify arbitrary memory contents, and disrupt device availability.
Is user interaction required for exploitation?
No user interaction is required. The supplied CVSS vector indicates network reachability, low attack complexity, no additional attack requirements, and no user interaction.