CVE-2026-109715
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox E
CVSS
8.1
Alto
EPSS
0.3%
p23
KEV
—
Exploit Today
7
0-100
Publicado: 13 oct 2026 · Última mod.: 16 oct 2026 · CWE-119
0.2%EPSS · 30 días0.3%
2026-10-142026-10-23
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=2073267
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-106/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-107/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-108/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-109/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2026-110/
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-11438310.0 CRÍ50.7%
——15A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.1dCVE-2026-11438210.0 CRÍ51.3%
——15A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.1dCVE-2026-1142689.9 CRÍ42.7%
——13A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the argument security_5g causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.1dCVE-2026-201975.8 MED31.9%
——10Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.
This vulnerability is due to incomplete error checking when Snort 3 parses Teredo packets. An attacker could exploit this vulnerability by sending a crafted Teredo packet to a targeted device to be parsed by Snort. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.1dCVE-2025-604975.5 MED6.3%
——2A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.2dCVE-2026-11374410.0 CRÍ49.2%
——15A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.3d