CVE-2026-36228

HighCVSS 7.3

Published: 22/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

35th percentile - higher than 35% of all known CVEs

Summary

A buffer overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality.

Risk Assessment

The risk includes full compromise of the chat server, data theft, and potential further attacks on the internal network.

Recommendation

Immediately update Easy Chat Server to the latest version or apply available security patches.

Other vulnerabilities in Easy Chat Server

CVE-2026-36227Medium
In Easy Chat Server 3.1, a Directory Traversal vulnerability via the UserName parameter allows a remote attacker to obtain sensitive information and execute arbitrary code.

Original NVD description (English source)

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality