CVE-2026-75348

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure() when it parses recognized optional socket address information items of type 0x8000 or 0x8001 without first validating that the remaining CPF buffer contains the complete fixed sockaddr structure. This allows a remote attacker to cause a denial of service.

• CWE-125

• https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/cpf.c
• https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/encap.c
• https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/endianconv.c
• https://github.com/EIPStackGroup/OpENer/issues/573
• https://github.com/EIPStackGroup/OpENer/issues/573

Published

Oct 9, 2026

Last Modified

Oct 9, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-75339The storage endpoint /storage/upload of cjbi admin3 v3.0.0 a…8.8
• CVE-2026-7534The SUMO Reward Points plugin for WordPress is vulnerable to…7.2
• CVE-2026-75340The device metadata import interface /device/instance/{produ…9.1
• CVE-2026-75345OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds rea…7.5
• CVE-2026-75346An out-of-bounds read vulnerability exists in EIPStackGroup …7.5
• CVE-2026-75347EIPStackGroup OpENer v2.3 and master up to commit 76b95cf co…7.5
• CVE-2026-75349EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf cont…7.5
• CVE-2026-7535A vulnerability was found in Open5GS up to 2.7.7. This affec…4.3
• CVE-2026-75350EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a…7.5
• CVE-2026-75351OpENer v2.3/commit 76b95cf, contains an out-of-bounds read i…7.5
• CVE-2026-75352OpENer v2.3/commit 76b95cf, contains an integer underflow in…7.5
• CVE-2026-75353OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read …7.5