Security Advisory
CVE-2026-22904
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attacker to send oversized cookie values and trigger a stack buffer overflow, resulting in a denial‑of‑service condition and possible remote code execution.