CVE-2026-43856
HighCVSS 8.6Summary
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
Risk Assessment
A remote authenticated attacker could execute arbitrary code by supplying an overly long path.
Recommendation
Apply the available security updates for the affected component.
Other vulnerabilities in Nieznany komponent
See all- CVE-2026-43858High
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
- CVE-2026-43857High
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
- CVE-2026-43855High
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
- CVE-2026-43853High
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
- CVE-2026-43852High
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
- CVE-2026-43851High
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
- CVE-2026-43850High
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
- CVE-2026-43847High
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
- CVE-2026-43846High
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.
Original NVD description (English source)
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS