A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test (VT) on the affected products to trigger a stack… (CVE-2026-81625)

This vulnerability (CVE-2026-81625) allows a remote attacker with user privileges to execute a malicious or compromised NASL vulnerability test (VT) that triggers a stack buffer overflow on the affected products. Successful exploitation results in full system compromise. The CVSS 3.1 score is 8.8, reflecting high impact on confidentiality, integrity, and availability. The vulnerability is categorized under CWE-787 (Out-of-bounds Write). There is no information about affected versions or available patches, and no known exploits in the wild have been reported.

An attacker with user privileges and network access can exploit this vulnerability to trigger a stack buffer overflow, potentially leading to full system compromise with complete control over the affected system. This impacts confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided at this time.