Topic

CWE-121: news, advisories and analysis

5 articlesUpdated 18 Oct 2026

CyberSecureToday covers CWE-121 across 5 articles published between 17 Sep 2026 and 18 Oct 2026. The coverage includes 5 vulnerability advisories. 5 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on CWE-121 most often intersect with Buffer Overflow, SCADA and IEC 62443, with Industrial, OT & IoT the most affected sector. The most recent story, “Nintendo Switch Local Wireless Multiplayer Flaw Allowed Remote Pre-Auth Stack Buffer Overflows”, was published 18 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
Nintendo Switch Local Wireless Multiplayer Flaw Allowed Remote Pre-Auth Stack Buffer Overflows
A remote stack buffer overflow in the Nintendo Switch LDN wireless multiplayer service allowed attackers within Wi-Fi range to hijack control flow.
Aisha Noor18 Oct 202614 min read
ThreatsIndustrial & OTCritical
Yokogawa CENTUM VP Human-Machine Interface Stack Overflow Allows Industrial Network Takeover
CISA industrial advisory ICSA-26-278-02 discloses a critical stack-based buffer overflow (CVE-2026-43890) in Yokogawa CENTUM VP Human Interface Stations.
Mei-Lin Chen7 Oct 20268 min read
ThreatsIndustrial & OTCritical
Tenda GPON Optical Network Terminals Open to Remote Code Execution via Overflow
A critical stack-based buffer overflow in Tenda GPON optical terminals allows unauthenticated remote attackers on the WAN interface to achieve root command execution.
CST Editorial Desk1 Oct 202610 min read
ThreatsIndustrial & OTCritical
OpenPLC Runtime v3 Flaw Enables Remote Controller Hijacking in Industrial Networks
CISA ICS advisory ICSA-26-265-09 details critical buffer overflow and authentication bypass flaws in OpenPLC Runtime v3, allowing remote process disruption.
Daniel Okafor24 Sep 202616 min read
ThreatsCloud & SaaSCritical
DD-WRT Gateway Firmware Stack Buffer Overflow CVE-2021-27137 Weaponized in Network Perimeter Attacks
CISA adds DD-WRT gateway vulnerability CVE-2021-27137 (CVSS 9.8) to KEV catalog following active weaponization by botnets targeting network perimeter routers.
Aisha Noor17 Sep 202613 min read

Latest coverage

Nintendo Switch Local Wireless Multiplayer Flaw Allowed Remote Pre-Auth Stack Buffer Overflows

Yokogawa CENTUM VP Human-Machine Interface Stack Overflow Allows Industrial Network Takeover

Tenda GPON Optical Network Terminals Open to Remote Code Execution via Overflow

OpenPLC Runtime v3 Flaw Enables Remote Controller Hijacking in Industrial Networks

DD-WRT Gateway Firmware Stack Buffer Overflow CVE-2021-27137 Weaponized in Network Perimeter Attacks