CVE ID :CVE-2026-101338 Published : Oct. 14, 2026, 11:16 a.m. | 16 minutes ago Description :When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write attacker controlled data...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-101338 - Stack overwrite from a specially crafted and formatted SVCB or HTTPS RR

VERWANDTEARTIKEL

PoC Released for Linux Vhost Flaw Enabling Root Privilege Escalation and VM Escape

CVE-2026-16741 - OS Command in TR7 Cyber ​​Defense's TR7 ASP

CVE-2026-82026 - Radar < 1.12.2 Missing Authorization via /api/local-terminal

CVE-2026-16740 - Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP

CVE-2026-108291 - WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability

CVE-2026-107424 - WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability

CVE-2026-16741 - OS Command in TR7 Cyber Defense's TR7 ASP

CVE-2026-16740 - Missing Authentication for Critical Function in TR7 Cyber Defense's TR7 ASP