CVE-2026-2291: ZDI-26-441: dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability

SPOJENO PŘES CVE ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products

[VDE-2026-076] The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0.

EPSS 0.03 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2026-14167 CVE-2026-14168 CVE-2026-14169 CVE-2026-14171 CVE-2026-22795 CVE-2026-22796 CVE-2026-2291 CVE-2026-40510 CVE-2026-4893 CVE-2026-5172 ads-tec Industrial IT Weidmüller DE

tg: zranitelnost tg: novinka v produktu tp: průmyslové systémy

28. 7. 2026 12:00 · CERT@VDE · ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products

SPOJENO PŘES CVE ZDI-26-441: dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of dnsmasq. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-2291.

EPSS 0.01 CVSS 8.1 CVE-2026-2291 dnsmasq US

15. 7. 2026 · Zero Day Initiative · ZDI-26-441: dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability 15. 5. 2026 · Microsoft Security · CVE-2026-2291 CVE-2026-2291