CVE-2026-114596

Integer overflow or wraparound in EPICS Base

In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

The Epics Community

Products

Epics Base

CVE-2026-114595

Integer overflow or wraparound in EPICS Base

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

The Epics Community

Products

Epics Base

CVE-2026-114409

Docker Desktop logs can expose stored third-party credentials

Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient IPC payload redaction. An attacker with read access to these files could obtain the credentials. These OAuth tokens are not Docker account tokens. Docker Desktop 4.94.0 and 4.95.0 addressed the known logging paths, but logs containing credentials can remain after upgrading. Docker Desktop 4.97.0 fixes the issue and includes cleanup of existing host logs and crash dumps.

CVSS 4.0 · 5.7 Medium EPSS < 1% KEV · Not listed

Vendors

Docker

Products

Desktop

CVE-2026-113881

Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution

A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service condition and potentially execute arbitrary code as an unprivileged process by sending a specially crafted request.

CVSS 4.0 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Fireware Os

CVE-2026-112710

Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Fireware Os

CVE-2026-112709

Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary code by returning a specially crafted response.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Fireware Os

CVE-2026-112331

Motor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent Mapping

Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sending a single crafted record. By setting the content-type header to application/cloudevents+json and omitting required CloudEvent attributes (id, source, type), the attacker triggers an ArgumentException in KafkaMessageConsumer.SingleMessageHandlingAsync that is treated as fatal, causing the host to stop and re-process the same poison record on every restart, resulting in a permanent crash-loop.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Gdatasoftwareag

Products

Motornet

CVE-2026-111585

Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Teamviewer

Products

Full Client Portable Remote

CVE-2026-111584

Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary directory during Patch Management activation.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Teamviewer

Products

Teamviewer Remote - Patch Management

CVE-2026-111583

Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Teamviewer

Products

Full Client Host

CVE-2026-111582

Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows

A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges. Exploitation requires user interaction.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Teamviewer

Products

Remote Management - Monitoring

CVE-2026-111548

Stack Buffer Overflow in Moxa Wireless Device Server Web Interface

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become unresponsive. Restoring the service requires power cycling the affected device, while other device functions remain operational.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Moxa

Products

Nport W2150a-w4 W2250a-w4 Series

CVE-2026-111107

Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service

A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially crafted login request. Repeated exploitation terminates all active administrator sessions and in-progress management operations and can prevent management of the device. Traffic processing is not affected.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Watchguard

Products

Fireware Os

CVE-2026-109823

Host filesystem path disclosure via DNS rebinding

An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar. Neither response checks the Host header. A web page that rebinds its own domain to the loopback address can therefore read the tag with a same-origin request, which carries no Origin header. The paths usually reveal the local username and the project layout. This issue affects tidewave: from 0.8.0 before 0.9.2.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed

Vendors

Tidewave-ai

Products

Tidewave

CVE-2026-109090

libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow

A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

X.org

Products

Libxi

CVE-2026-109089

libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow

A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

X.org

Products

Libxi

CVE-2026-108333

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

CVSS 3.1 · 2.5 Low EPSS < 1% KEV · Not listed

Vendors

Tanium

Products

Endpoint Configuration Toolset Solution Threat Response

CVE-2026-108332

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Tanium

Products

Endpoint Configuration Toolset Solution Threat Response

CVE-2026-108331

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Tanium

Products

Endpoint Configuration Toolset Solution Threat Response

CVE-2026-108330

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

CVSS 3.1 · 3.6 Low EPSS < 1% KEV · Not listed

Vendors

Tanium

Products

Endpoint Configuration Toolset Solution Threat Response