CVE-2026-43838

CriticalCVSS 9.2

Published: 20/10/2026(UTC)Translated: 20/10/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

Risk Assessment

An attacker could exploit the buffer overflow to execute arbitrary code, potentially leading to system compromise.

Recommendation

Update the software to a patched version and, where possible, restrict access to the login functionality.

Other vulnerabilities in Login functionality

CVE-2026-33920Low
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials, and any operation performed by the victim is attributed to the attacker's account.

Original NVD description (English source)

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS