Topic
8 articles
CyberSecureToday covers CWE-122 across 8 articles published between 21 Sep 2026 and 15 Oct 2026.
The coverage includes 8 vulnerability advisories. 8 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.
Stories on CWE-122 most often intersect with Heap Buffer Overflow, SCADA and OT/ICS, with Technology, Cloud & SaaS the most affected sector. The most recent story, “NGINX Heap Overflow in Regex Map Handling Threatens Worker Processes”, was published 15 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelF5 NGINX patches critical heap buffer overflow CVE-2026-93479 in ngx_http_core_module where regex map variables lead to worker crash and code execution.
OT / SCADACISA and Schneider Electric issue critical advisory for CVE-2026-50891 in EcoStruxure Geo SCADA Expert servers permitting unauthenticated remote root code execution.
Gov / DefenseCISA Advisory ICSA-26-281-01 details a critical heap corruption vulnerability in Honeywell Experion PKS distributed control systems.
Gov / DefenseCISA Advisory ICSA-26-278-02 details a critical memory corruption vulnerability in Schneider Electric Modicon M580 and M340 industrial controllers.
Threat IntelA pre-authentication heap buffer overflow in ESnet iperf3 v3.20–3.21 allows unauthenticated remote attackers to corrupt heap memory via oversized RSA tokens.
OT / SCADACISA Advisory ICSA-26-240-02 warns of a critical heap-based buffer overflow in Schneider Electric EcoStruxure Operator Terminal Expert enabling remote code execution.
Threat IntelF5 confirms active zero-day exploitation of CVE-2026-94127, a critical heap buffer overflow in BIG-IP APM OAuth gateways allowing unauthenticated remote code execution.
Agentic AIHacktron AI researchers demonstrate how Claude Opus 5 synthesized an ASLR-bypassing libheif exploit to breach OpenAI forum and pivot to internal repos.