CVE-2021-31226

An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to lack of size validation. This vulnerability requires the attacker to send a crafted HTTP POST request with a URI longer than 50 bytes. This leads to a heap overflow in wbs_post() via an strcpy() call.

• CWE-787

• https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/Mitigation, Third Party Advisory
• https://www.kb.cert.org/vuls/id/608209Third Party Advisory, US Government Resource
• https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/Mitigation, Third Party Advisory
• https://www.kb.cert.org/vuls/id/608209Third Party Advisory, US Government Resource

Published

Aug 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31220SES Evolution before 2.1.0 allows modifying security policie…5.2
• CVE-2021-31221SES Evolution before 2.1.0 allows deleting some parts of a s…5.7
• CVE-2021-31222SES Evolution before 2.1.0 allows updating some parts of a s…5.7
• CVE-2021-31223SES Evolution before 2.1.0 allows reading some parts of a se…5.7
• CVE-2021-31224SES Evolution before 2.1.0 allows duplicating an existing se…3.5
• CVE-2021-31225SES Evolution before 2.1.0 allows deleting some resources no…7.3
• CVE-2021-31227An issue was discovered in HCC embedded InterNiche 4.0.1. A …7.5
• CVE-2021-31228An issue was discovered in HCC embedded InterNiche 4.0.1. Th…7.5
• CVE-2021-31229An issue was discovered in libezxml.a in ezXML 0.8.6. The fu…6.5
• CVE-2021-31231The Alertmanager in Grafana Enterprise Metrics before 1.2.1 …5.5
• CVE-2021-31232The Alertmanager in CNCF Cortex before 1.8.1 has a local fil…5.5
• CVE-2021-31233SQL Injection vulnerability found in Fighting Cock Informati…7.5