CVE-2025-68615
net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp s
CVSS
9.8
Critical
EPSS
42.4%
p99
KEV
—
Exploit Today
30
0-100
Published: Dec 23, 2025 · Last modified: Oct 19, 2026 · CWE-119
42.4%EPSS · 30 days42.4%
2026-09-232026-10-20
net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.
- github.comhttps://github.com/net-snmp/net-snmp/security/advisories/GHSA-4389-rwqf-q9gq
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/01/09/2
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2026/01/msg00000.html
- www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2025-68615-detection-script-buffer-overflow-vulnerability-affecting-net-snmp
- www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2025-68615-mitigation-script-buffer-overflow-vulnerability-affecting-net-snmp
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-11374410.0 CRI—
——0A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.1dCVE-2026-1133438.8 HIG—
——0Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)23hCVE-2026-1133429.6 CRI—
——0Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)1dCVE-2026-113341——
——0Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)1dCVE-2026-113340——
——0Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)1dCVE-2026-1133378.8 HIG—
——0Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)23h