CVE-2026-32955

SD-330AC and AMC Manager provided by silex technology, Inc. contain a stack-based buffer overflow vulnerability in processing the redirect URLs. Arbitrary code may be executed on the device.

• CWE-121

• https://jvn.jp/en/vu/JVNVU94271449/Third Party Advisory
• https://www.silex.jp/support/security-advisories/2026-001Vendor Advisory
• https://www.silex.jp/support/security-advisories/en/2026-001Vendor Advisory

Published

Apr 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-32949SQLBot is an intelligent data query system based on a large …7.5
• CVE-2026-32950SQLBot is an intelligent data query system based on a large …8.8
• CVE-2026-32951Discourse is an open-source discussion platform. From versio…4.3
• CVE-2026-32952go-ntlmssp is a Go package that provides NTLM/Negotiate auth…7.5
• CVE-2026-32953Tillitis TKey Client package is a Go package for a TKey clie…4.6
• CVE-2026-32954ERP is a free and open source Enterprise Resource Planning t…7.5
• CVE-2026-32956SD-330AC and AMC Manager provided by silex technology, Inc. …9.8
• CVE-2026-32957SD-330AC and AMC Manager provided by silex technology, Inc. …6.9
• CVE-2026-32958SD-330AC and AMC Manager provided by silex technology, Inc. …6.9
• CVE-2026-32959SD-330AC and AMC Manager provided by silex technology, Inc. …8.2
• CVE-2026-3296The Everest Forms plugin for WordPress is vulnerable to PHP …9.8
• CVE-2026-32960SD-330AC and AMC Manager provided by silex technology, Inc. …7.1