Topic

Buffer Overflow: news, advisories and analysis

20 articlesUpdated 1 Nov 2026

CyberSecureToday covers Buffer Overflow across 20 articles published between 17 Sep 2026 and 1 Nov 2026. The coverage includes 20 vulnerability advisories. 20 advisories are rated critical or high severity, and 2 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Buffer Overflow most often intersect with Remote Code Execution, SCADA and IEC 62443, with Technology, Cloud & SaaS the most affected sector. The most recent story, “TeamViewer Vulnerability Inverts Remote Threat Model: Host Buffer Overflow Attacks Connecting Technicians (CVE-2026-111585)”, was published 1 Nov 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
TeamViewer Vulnerability Inverts Remote Threat Model: Host Buffer Overflow Attacks Connecting Technicians (CVE-2026-111585)
CVE-2026-111585 in TeamViewer allows a compromised remote host to exploit buffer overflows and achieve code execution on the connecting support technician's PC.
Mei-Lin Chen1 Nov 202611 min read
ThreatsCloud & SaaSHigh
Nintendo Switch Local Wireless Multiplayer Flaw Allowed Remote Pre-Auth Stack Buffer Overflows
A remote stack buffer overflow in the Nintendo Switch LDN wireless multiplayer service allowed attackers within Wi-Fi range to hijack control flow.
Aisha Noor18 Oct 202614 min read
ThreatsCloud & SaaSCritical
Cisco NX-OS Heap Buffer Overflow in NX-API Allows Unauthenticated Root Code Execution
A critical heap buffer overflow in Cisco NX-OS Software (CVE-2026-76471) allows unauthenticated remote attackers to execute arbitrary code with root OS privileges.
CST Editorial Desk18 Oct 20269 min read
ThreatsCloud & SaaSCritical
Google Chrome Emergency Update Resolves Critical ANGLE Graphics Buffer Overflow Flaw CVE-2026-110152
Google issues an emergency Chrome update for desktop and Android fixing a critical buffer overflow (CVE-2026-110152) in the ANGLE graphics engine allowing remote code execution.
Mei-Lin Chen17 Oct 20268 min read
NewsIndustrial & OTCritical
Honeywell MasterLogic-200 PLC Ethernet Module Vulnerability Enables Unauthenticated Memory Overwrite and Controller Takeover (CVE-2026-79110)
Honeywell releases emergency firmware for MasterLogic-200 PLCs (CVE-2026-79110, CVSS 9.4) addressing an unauthenticated Ethernet stack buffer overflow.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
Phoenix Contact ILC Inline Modular Controller Vulnerability Enables Unauthenticated PROFINET Protocol Memory Corruption (CVE-2026-78950)
Phoenix Contact issues an emergency advisory for Inline Modular Controllers (CVE-2026-78950, CVSS 9.5) fixing a critical PROFINET stack buffer overflow.
CST Editorial Desk12 Oct 20268 min read
ThreatsIndustrial & OTCritical
Yokogawa FAST/TOOLS SCADA Gateway Buffer Overflow Vulnerability Enables Remote Industrial Process Disruption (CVE-2026-56891)
Yokogawa Electric issues a critical security bulletin detailing a heap-based buffer overflow in FAST/TOOLS SCADA servers permitting remote code execution.
CST Editorial Desk9 Oct 20268 min read
ThreatsCloud & SaaSHigh
NVIDIA Triton Inference Server Shared Memory Buffer Overflow Permits Local GPU Memory Corruption (CVE-2026-53112)
NVIDIA issues a high-severity security bulletin for Triton Inference Server addressing a shared memory buffer overflow that permits arbitrary GPU memory corruption.
Aisha Noor8 Oct 20268 min read
ThreatsCloud & SaaSCritical
HPE Fixes 18 Instant On Access Point Flaws, Including Unauthenticated RCE Bugs
HPE bulletin HPESBNW05150 fixes 18 Instant On AP flaws, including two CVSS 9.8 unauthenticated RCE bugs (CVE-2026-76721, CVE-2026-76722). Update to 3.4.2.0.
Aisha Noor3 Oct 20265 min read
ThreatsCloud & SaaSCritical
Apache Thrift C++ Transport Heap Overflow Exposes Microservices to Remote Code Execution
A critical heap buffer overflow in Apache Thrift C++ THeaderTransport allows remote adversaries to corrupt memory during ZLIB frame decompression.
Priya Raman2 Oct 20269 min read
$Rugged DIN-rail industrial protocol gateway device inside an electrical substation with holographic SCADA protocols fracturing under memory buffer corruption$
ThreatsIndustrial & OTCritical
Stack Buffer Overflow in Moxa Industrial Protocol Gateways Enables Remote Device Compromise (CVE-2026-86325)
A critical stack buffer overflow in Moxa industrial protocol gateways allows authenticated attackers to corrupt memory and hijack critical substation controllers.
Daniel Okafor2 Oct 20268 min read
ThreatsCloud & SaaSCritical
Fortra Core Privileged Access Manager BoKS Daemon Overflow Allows Remote Code Execution
A critical stack-based buffer overflow in Fortra Core Privileged Access Manager BoKS autoregistration daemon allows unauthenticated remote code execution.
Priya Raman2 Oct 20269 min read
$Citrix NetScaler ADC perimeter gateway appliance with fractured glowing binary memory buffers under cybernetic attack$
ThreatsCloud & SaaSCritical
Citrix NetScaler ADC Memory Buffer Flaws Exploited to Breach Perimeter Gateways
Threat actors are actively weaponizing memory buffer overflow and command injection flaws in Citrix NetScaler ADC to breach enterprise perimeter gateways.
Priya Raman2 Oct 20269 min read
ThreatsIndustrial & OTCritical
Tenda GPON Optical Network Terminals Open to Remote Code Execution via Overflow
A critical stack-based buffer overflow in Tenda GPON optical terminals allows unauthenticated remote attackers on the WAN interface to achieve root command execution.
CST Editorial Desk1 Oct 202610 min read
ThreatsCloud & SaaSHigh
Palo Alto Networks PAN-OS XML Flaw Allows Remote Code Execution on Firewalls
Palo Alto Networks resolves a critical buffer overflow in PAN-OS XML parsing (CVE-2026-0310) allowing unauthenticated attackers to execute root code.
CST Editorial Desk30 Sep 20269 min read
ThreatsIndustrial & OTCritical
OpenPLC Runtime v3 Flaw Enables Remote Controller Hijacking in Industrial Networks
CISA ICS advisory ICSA-26-265-09 details critical buffer overflow and authentication bypass flaws in OpenPLC Runtime v3, allowing remote process disruption.
Daniel Okafor24 Sep 202616 min read
ThreatsCloud & SaaSHigh
Zyxel GS1900 Switches Exploited in the Wild via CGI Buffer Overflow
Zyxel patches actively exploited stack buffer overflow flaw CVE-2026-7273 in GS1900 smart switches, enabling unauthenticated LAN attackers to execute arbitrary code.
Daniel Okafor22 Sep 202615 min read
ThreatsCloud & SaaSCritical
vLLM Video Parser Buffer Overflow Enables Remote Root Code Execution
vLLM maintainers and NIST disclose critical CVSS 9.8 flaw CVE-2026-22778 in multimodal video processing allowing unauthenticated remote root takeover of GPU clusters.
Daniel Okafor20 Sep 202614 min read
ThreatsCloud & SaaSCritical
Check Point Security Management Buffer Overflow Flaw Enables Unauthenticated Remote Root Code Execution
Check Point and CERT-In issue emergency alerts for critical CVSS 9.8 flaw CVE-2026-91843 in Security Management and Log Servers allowing remote unauthenticated root compromise.
Mei-Lin Chen20 Sep 202614 min read
ThreatsCloud & SaaSCritical
DD-WRT Gateway Firmware Stack Buffer Overflow CVE-2021-27137 Weaponized in Network Perimeter Attacks
CISA adds DD-WRT gateway vulnerability CVE-2021-27137 (CVSS 9.8) to KEV catalog following active weaponization by botnets targeting network perimeter routers.
Aisha Noor17 Sep 202613 min read