CVE-2025-11783

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The vulnerability is found in the 'AddEvent()' function when copying the user-controlled username input to a fixed-size buffer (48 bytes) without boundary checking. This can lead to memory corruption, resulting in possible remote code execution.

• CWE-121

• https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-circutor-products-0Third Party Advisory

Published

Dec 2, 2025

Last Modified

Sep 26, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11778Stack-based buffer overflow in Circutor SGE-PLC1000/SGE-PLC5…9.8
• CVE-2025-11779Stack-based buffer overflow vulnerability in CircutorSGE-PLC…9.8
• CVE-2025-1178A vulnerability was found in GNU Binutils 2.43. It has been …6.3
• CVE-2025-11780Stack-based buffer overflow vulnerability in Circutor SGE-PL…9.8
• CVE-2025-11781Use of hardcoded cryptographic keys in Circutor SGE-PLC1000/…7.8
• CVE-2025-11782Stack-based buffer overflow vulnerability in Circutor SGE-PL…9.8
• CVE-2025-11784Stack-based buffer overflow vulnerability in Circutor SGE-PL…9.8
• CVE-2025-11785Stack-based buffer overflow vulnerability in Circutor SGE-PL…9.8
• CVE-2025-11786Stack-based buffer overflow vulnerability in Circutor SGE-PL…9.8
• CVE-2025-11787Command injection vulnerability in the operating system in C…8.8
• CVE-2025-11788Heap-based buffer overflow vulnerability in Circutor SGE-PLC…9.8
• CVE-2025-11789Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE…7.5