SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-49882

HIGH · CVSS 8.8 EPSS 0.30% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A heap buffer overflow vulnerability in the rw_mfc_handle_read_op function can lead to remote code execution without requiring any user interaction or additional privileges. Organizations using affected products should prioritize addressing this issue to mitigate potential exploitation risks. Given the severity and the nature of the vulnerability, immediate attention is recommended for systems handling sensitive data or critical operations.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-49882
Severity
HIGH
CVSS
8.8
EPSS
0.30%

Original NVD Description

In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.