CVE-2026-102809
Last modified
CVE-2026-102809 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight controller..
Description
PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight controller.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| PX4 | PX4-Autopilot | <= 1.17.0 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-102809?
How severe is CVE-2026-102809?
How do I fix CVE-2026-102809?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-102803Joomla Extension - j2commerce.com - Gift voucher and single-…6
- CVE-2026-102804A vulnerability was detected in Nothings stb up to 2c980bb59…6.5
- CVE-2026-102805A flaw has been found in Nothings stb up to 1.16. This affec…6.5
- CVE-2026-102806OpenClaw before 2026.9.5 contains an incorrect authorization…6.3
- CVE-2026-102807OpenClaw before 2026.9.4 contains an incorrect authorization…5.3
- CVE-2026-102808PX4 Autopilot through 1.17.0 contains a NULL pointer derefer…6.5
- CVE-2026-10281A weakness has been identified in Enderfga claw-orchestrator…7.3
- CVE-2026-102810Marmite through 0.4.2 contains a path traversal vulnerabilit…7.5
- CVE-2026-102811Marmite through 0.4.2 contains missing authentication in the…7.5
- CVE-2026-102812A hard-coded cryptographic key vulnerability exists in the u…6.9
- CVE-2026-102813An authentication flaw exists in the password-recovery funct…6.1
- CVE-2026-102814An authentication weakness exists in the TP-Link TDDP v2 ser…8.7
Are you affected by CVE-2026-102809?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST