CVE-2026-19933
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. It affects the gets function in the Customer Search Module, causing a stack-based buffer overflow. The attack can be initiated remotely, and the exploit has been made public.
Risk Assessment
The organization may face remote code execution or service disruption. The public exploit increases the likelihood of active attacks.
Recommendation
Apply patches provided by the project immediately or temporarily disable the customer search module. Monitor project communications for fix status.
Original NVD description (English source)
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project confirms, that "it’s being processed".