CVE-2026-11413 is a stack-based buffer overflow vulnerability in the set_macfilter function of the /sbin/jdcweb_rpc binary on JingDong JD Cloud Box AX6600 version 4.5.3.r4546. The vulnerability allows remote attackers to cause a buffer overflow condition, potentially leading to arbitrary code execution or denial of service. The vulnerability has been publicly disclosed with exploit details available, but the vendor has not provided any response or patch. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impacts on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code or cause a denial of service on affected devices. The high CVSS score reflects significant impact on confidentiality, integrity, and availability. Since the vulnerability is remotely exploitable without user interaction, affected devices are at elevated risk if exposed to untrusted networks.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded to the disclosure, users should apply network-level protections such as restricting access to the affected device's management interfaces to trusted networks only. Monitor for any updates from the vendor regarding patches or official mitigations. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.