CVE-2026-2653

A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. It looks like this product is not really maintained anymore.

• CWE-119
• CWE-122

• https://github.com/admesh/admesh/Product
• https://github.com/admesh/admesh/issues/65Issue Tracking
• https://github.com/admesh/admesh/issues/65#issuecomment-3804571402Issue Tracking
• https://github.com/user-attachments/files/24878279/id.000035.sig.06.src.000550.time.910126.execs.241742.op.havoc.rep.5.zipExploit
• https://vuldb.com/?ctiid.346450Permissions Required, VDB Entry
• https://vuldb.com/?id.346450Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.752596Third Party Advisory, VDB Entry

Published

Feb 18, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-26483Mettle SendPortal 3.0.1 and earlier contains a stored cross-…6.1
• CVE-2026-2649Integer overflow in V8 in Google Chrome prior to 145.0.7632.…8.8
• CVE-2026-2650Heap buffer overflow in Media in Google Chrome prior to 145.…8.8
• CVE-2026-2651A vulnerability in MLflow versions <=3.10.1.dev0 allows unau…9
• CVE-2026-26514An Argument Injection vulnerability exists in bird-lg-go bef…7.5
• CVE-2026-2652A vulnerability in mlflow/mlflow versions 3.9.0 and earlier …8.6
• CVE-2026-2654A weakness has been identified in huggingface smolagents 1.2…9.8
• CVE-2026-2655A vulnerability was detected in ChaiScript up to 6.1.0. The …2.5
• CVE-2026-2656A flaw has been found in ChaiScript up to 6.1.0. This affect…2.5
• CVE-2026-2657A vulnerability has been found in wren-lang wren up to 0.4.0…5.5
• CVE-2026-2658A vulnerability was found in newbee-ltd newbee-mall up to a0…4.3
• CVE-2026-2659A vulnerability was determined in Squirrel up to 3.2. Affect…7.8