CVE-2026-15694

Tenda BE12 Pro SetIpBind fromSetIpBind stack-based overflow

A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Tenda

Products

Be12 Pro

CVE-2026-83891

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Microsoft 365 Microsoft Office Ltsc 2021 and 8 more

CVE-2026-88156

Microsoft Office Outlook Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Microsoft 365 Microsoft Office 365 For Mac and 9 more

CVE-2026-43771

Stack Overflow in macOS Causing Denial of Service

A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Apple

Products

Macos

CVE-2026-9869

Stack-Based Buffer Overflow in TR069 Interface of Totolink X2000R Enables Remote Code Execution

A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Totolink

Products

X2000r

CVE-2026-9817

Stack‑Based Buffer Overflow in TOTOLINK X2000R Boa formUploadFile Enables Arbitrary Code Execution by Authenticated Users

A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Totolink

Products

X2000r

CVE-2026-9660

Stack-Based Buffer Overflow in Totolink X2000R Boa formFilter Allows Remote Code Execution

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability deals with the vpnPassword parameter.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Totolink

Products

X2000r

CVE-2026-42026

Stack-based Buffer Overflow in Totolink X2000R DHCP DNS Functionality

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the dhcp_dns2 parameter.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Totolink

Products

X2000r

CVE-2026-42024

Stack‑Based Buffer Overflow in Totolink X2000R IPv6 Static Configuration Leading to Arbitrary Code Execution

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_gw parameter.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Totolink

Products

X2000r

CVE-2026-42023

Stack-based buffer overflow in Totolink X2000R static IPv6 configuration allows remote code execution

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_ipv6 parameter.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Totolink

Products

X2000r

CVE-2026-42022

Stack‑Based Buffer Overflow in Totolink X2000R Static IPv6 Configuration

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_dns2 parameter.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Totolink

Products

X2000r

CVE-2026-42021

Stack-Based Buffer Overflow in Totolink X2000R HTTP Interface Leading to Arbitrary Code Execution

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_dns1 parameter.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Totolink

Products

X2000r

CVE-2026-10139

Stack-based Buffer Overflow in Totolink X2000R Mcli Functionality Allowing Remote Code Execution

A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Totolink

Products

X2000r

CVE-2026-10137

Stack‑Based Buffer Overflow in boa formUpload() Enables Arbitrary Code Execution

A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Totolink

Products

X2000r

CVE-2026-10133

Stack-based Buffer Overflow in Totolink X2000R Batch Update Allows Arbitrary Code Execution

A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Totolink

Products

X2000r

CVE-2026-10132

Stack-Based Buffer Overflow in Boa Form IP QoS MAC Functionality Leading to Arbitrary Code Execution

A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Totolink

Products

X2000r

CVE-2026-108431

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Microsoft 365 Microsoft Office Ltsc 2021 and 8 more

CVE-2026-88083

Microsoft SQL Server Remote Code Execution Vulnerability

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Microsoft Sql Server 2022 (gdr) Microsoft Sql Server 2022 For X64-based Systems \(cu27\) Microsoft Sql Server 2025 For X64-based Systems (gdr) and 3 more

CVE-2026-108445

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Microsoft 365 Microsoft Office Ltsc 2021 and 8 more

CVE-2026-96248

Windows Host Guardian Service Denial of Service Vulnerability

Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows Server 2016 and 6 more