CVE-2026-65610

nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression (homelen - 1) is promoted to signed int and becomes -1 and producing an out-of-bounds read and an out-of-bounds write one byte before the path buffer.  Maintainer of this project was notified about this vulnerability. It might has been addressed, but the maintainer did not provide a vulnerable version range. Only version 5.2 was tested and confirmed as vulnerable.

• CWE-197

• https://cert.pl/en/posts/2026/08/CVE-2026-65609

Published

Aug 19, 2026

Last Modified

Aug 28, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-65605SiYuan before v3.7.2 contains a stored cross-site scripting …9.6
• CVE-2026-65606SiYuan before v3.7.2 contains a cross-site scripting vulnera…9.6
• CVE-2026-65607SiYuan before v3.7.2 contains a path traversal vulnerability…7.1
• CVE-2026-65608Grav versions >= 1.7.0 and before 2.0.9 contain a remote cod…8.8
• CVE-2026-65609nnn is vulnerable to Out-of-Bound write vulnerability. Due t…2.4
• CVE-2026-6561A vulnerability was detected in EyouCMS up to 1.7.1. This is…4.7
• CVE-2026-65611nnn does not sanitize the path variable. An attacker can cre…5.1
• CVE-2026-65612nnn does not sanitize the filename variable. An attacker can…5.1
• CVE-2026-65613Exposure of Sensitive Information to an Unauthorized Actor v…4.3
• CVE-2026-65616Incorrect authorization validation in refresh token signatur…8.8
• CVE-2026-65617A deserialization weakness in JFrog Artifactory package hand…8.8
• CVE-2026-65618Improper URL validation when handling specific URLs, allows …6.5