CVE-2020-5806

An attacker-controlled memory allocation size can be passed to the C++ new operator in the CServerManager::HandleBrowseLoadIconStreamRequest in messaging.dll. This can be done by sending a specially crafted message to 127.0.0.1:7153. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affected.

• CWE-770

• https://www.tenable.com/security/research/tra-2020-71Third Party Advisory
• https://www.tenable.com/security/research/tra-2020-71Third Party Advisory

Published

Dec 29, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5800The Eat Spray Love mobile app for both iOS and Android conta…9.8
• CVE-2020-5801An attacker can craft and send an OpenNamespace message to p…7.5
• CVE-2020-5802An attacker-controlled memory allocation size can be passed …7.5
• CVE-2020-5803Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.…8.1
• CVE-2020-5804Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a pa…8.1
• CVE-2020-5805In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are…8.8
• CVE-2020-5807An unauthenticated remote attacker can send data to RsvcHost…7.5
• CVE-2020-5808In certain scenarios in Tenable.sc prior to 5.17.0, a scanne…7.5
• CVE-2020-5809A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or…5.4
• CVE-2020-5810A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or…5.4
• CVE-2020-5811An authenticated path traversal vulnerability exists during …6.5
• CVE-2020-5812Nessus AMI versions 8.12.0 and earlier were found to either …5.9