CVE Watch7 ago 2026

CVE-2023-46847

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary d

CVSS

8.6

Alto

EPSS

78.5%

p100

KEV

—

Exploit Today

0-100

Publicado: 3 nov 2023 · Última mod.: 7 ago 2026 · CWE-120

EPSS · 30d

78.5%EPSS · 30 días88.4%

2026-09-222026-10-20

Descripción técnica

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1011035.5 MED

—

——0The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record.13h CVE-2026-43837—

29.0%

——9A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.15h CVE-2026-118296.5 MED

13.5%

——4IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests.2d CVE-2026-118285.9 MED

15.9%

——5IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.2d CVE-2026-1121086.3 MED

35.9%

——11A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.2d CVE-2026-1121076.3 MED

35.9%

——11A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument data_offsets causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.2d