CVE ID :CVE-2026-107837 Published : Oct. 9, 2026, 6:17 p.m. | 1 hour, 12 minutes ago Description :RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, _receive() in...

#Sicherheitslücke #IoT

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-107837 - RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling

VERWANDTEARTIKEL

CVE-2026-108264 - Wizarr: Authenticated Server-Side Template Injection (SSTI) in wizard step rendering leads to Remote Code Execution (RCE)

CVE-2026-62376 - Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access

CVE-2026-108263 - Astron Agent: Unsandboxed code-node leads to cross-tenant RCE

CVE-2026-57458 - Vikunja: Scoped API token can mint unrestricted OAuth session credentials

CVE-2026-108261 - TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

CVE-2026-108259 - Tina: Code injection via unescaped Git branch name in generated client source