Threats Tagged 'cve-2026-10848'
View all threats tagged with 'cve-2026-10848'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-10848'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-10848: bounds in zephyrproject zephyrCVE-2026-10848 0 CVE-2026-10848 is a vulnerability in the Zephyr project's OCPP 1.6 client that improperly handles inbound WAMP RPC frames. The flaw arises from using strncpy without ensuring NUL-termination, leading to out-of-bounds reads and a potential one-byte out-of-bounds write on the stack. This can be triggered remotely by a malicious or compromised OCPP central-system server sending crafted frames. The primary impact is a remotely triggerable denial of service due to memory corruption and potential faults. The vulnerable feature is experimental and must be explicitly enabled. A fix replaces the manual parser with a bounds-respecting parser and ensures proper NUL-termination. Join the discussion | CVE Database V5 | 08/02/2026, 16:12:18 UTC Added: 08/02/2026, 16:33:29 UTC |
Showing 1 to 1 of 1 result