CVE-2026-112063
libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a
CVSS
5.9
Medium
EPSS
0.2%
p14
KEV
—
Exploit Today
4
0-100
Published: Oct 18, 2026 · Last modified: Oct 19, 2026 · CWE-121
0.2%EPSS · 30 days0.2%
2026-10-192026-10-20
libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes, aborting the client or overwriting stack memory in NDEBUG builds.
- github.comhttps://github.com/strophe/libstrophe/blob/0.14.0/src/sasl.c
- github.comhttps://github.com/strophe/libstrophe/blob/0.14.0/src/scram.c
- hackmd.iohttps://hackmd.io/@haindpwn/libstrophe-scram-salt-stack-overflow
- www.vulncheck.comhttps://www.vulncheck.com/advisories/libstrophe-through-0.14.0-stack-based-buffer-overflow-via-scram-salt-in-scram-hi
- hackmd.iohttps://hackmd.io/@haindpwn/libstrophe-scram-salt-stack-overflow
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-11374410.0 CRI—
——0A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.16hCVE-2026-938887.8 HIG—
——0IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.20hCVE-2026-765878.8 HIG—
——0IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.20hCVE-2026-98699.1 CRI—
——0A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.21hCVE-2026-98179.1 CRI—
——0A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.21hCVE-2026-96609.1 CRI—
——0Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability deals with the vpnPassword parameter.21h