CVE Watch16 oct 2026

CVE-2026-102693

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04

CVSS

9.6

Crítico

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 16 oct 2026 · Última mod.: 16 oct 2026 · CWE-120 · CWE-121

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwinc15x0_sta_set_current_ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE_ATWINC15X0_DYNAMIC_CONNECT is enabled, a nearby attacker can advertise a malformed or oversized SSID that is processed during Wi-Fi scanning, causing memory corruption and potentially a hard fault, denial of service, or code execution. This issue is fixed in version 2026.04.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1117119.8 CRÍ

—

———Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user_ok() function, which copies Basic-auth usernames with unbounded strcpy() calls into 64-byte stack buffers. Unauthenticated attackers can send a username longer than 63 bytes to any protected /router/*.cgi route to crash the main Boa process or potentially execute code.6h CVE-2026-1084458.8 ALT

—

———Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.6h CVE-2026-1084408.8 ALT

—

———Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.6h CVE-2026-1084318.8 ALT

—

———Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.6h CVE-2026-798407.3 ALT

—

——0A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.1d CVE-2026-798397.3 ALT

—

——0A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.1d