CVE-2026-115678
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Arm Keil MDK-Middleware versions 8.0.0–8.3.0 may allow a pre-authentication out-of-bounds read in SNMP processing. The issue affects the library's SNMP component.
Risk Assessment
This may lead to information disclosure or SNMP service crashes in embedded devices, and the attack does not require prior authentication. The risk affects systems with an exposed SNMP agent.
Recommendation
Update Arm Keil MDK-Middleware to a version newer than 8.3.0 if available, or restrict SNMP service access to trusted networks only.
Other vulnerabilities in Arm Keil MDK-Middleware
See all- CVE-2026-115680Medium
Arm Keil MDK-Middleware versions 8.0.0–8.3.0 may allow DHCPv6 Option-Walk over-reads and unintended data retransmission. The issue affects the library's network stack.
- CVE-2026-115679Medium
Arm Keil MDK-Middleware version 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX buffer. The issue affects the library's FTP server component.
Original NVD description (English source)
Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing
Vulnerability data from NVD (NIST) · CISA KEV · EPSS