Beveiligingsadvies

CVE-2026-22904

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-09 07:40:00

Laatst bijgewerkt 2026-02-09 15:34:53

Toegewezen door CERTVDE

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attacker to send oversized cookie values and trigger a stack buffer overflow, resulting in a denial‑of‑service condition and possible remote code execution.

← Alle CVE's bekijken Bekijk op cve.org ↗