CVE-2026-77532

Published: Aug 26, 2026Modified: Aug 28, 2026Deferred

9.6

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 6.0

Source: fe490ce8-0395-4072-90d8-2707e1bdf984 (Secondary)

Description

A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.

Related CWEs

CWE-122

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (1)

https://uisp.community.ui.com/releases/Security-Advisory-Bulletin-068-068/b95ea5e8-1a80-4ffc-ad42-625eae300cc9

Source: fe490ce8-0395-4072-90d8-2707e1bdf984

Timeline

No history available yet.