CVE-2026-67673

A stack-based buffer overflow vulnerability exists in the cmd_edl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fw_flash command, where the <filename> argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical access to the UART3 serial interface can exploit this vulnerability by sending a maliciously crafted command with an oversized filename parameter,

• CWE-121

• https://github.com/dazuo233/cve/issues/2

Published

Aug 3, 2026

Last Modified

Aug 5, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-67623Mistral Vibe before 2.23.3 contains a remote code execution …8.8
• CVE-2026-6763Mitigation bypass in the File Handling component. This vulne…6.5
• CVE-2026-6764Incorrect boundary conditions in the DOM: Device Interfaces …6.5
• CVE-2026-6765Information disclosure in the Form Autofill component. This …5.3
• CVE-2026-6766Incorrect boundary conditions in the Libraries component in …7.5
• CVE-2026-6767Other issue in the Libraries component in NSS. This vulnerab…5.3
• CVE-2026-6768Mitigation bypass in the Networking: Cookies component. This…9.8
• CVE-2026-67687Insecure Permissions vulnerability in ics-park v.2.0 allows …8.8
• CVE-2026-67688ICS-Park Smart Park Management System v2.0 contains an unres…9.8
• CVE-2026-67689SQL Injection vulnerability in FineAdmin V1.0 allows a remot…9.8
• CVE-2026-6769Privilege escalation in the Debugger component. This vulnera…8.8
• CVE-2026-6770Other issue in the Storage: IndexedDB component. This vulner…6.5