Tag
Unauthenticated Remote Access to Phoenix Contact CHARX SEC MQTT Broker
2 rules 5 TTPs 12 CVEsA critical vulnerability (CVE-2026-44090) in Phoenix Contact CHARX SEC controllers allows unauthenticated remote attackers to gain full device control by bypassing authentication on the MQTT broker.
DENX U-Boot: Multiple Vulnerabilities Enable Arbitrary Code Execution and Denial of Service
2 TTPsAn attacker with physical access can exploit multiple unspecified vulnerabilities in DENX U-Boot to execute arbitrary code with service privileges, leading to system compromise and potentially causing a denial-of-service condition.
CVE-2026-29008: U-Boot Integer Underflow Leads to Bootloader Crash
1 TTP 1 CVEAn integer underflow vulnerability (CVE-2026-29008) in U-Boot's `tcp_rx_state_machine()` function allows a network-adjacent attacker to crash the bootloader by sending a crafted TCP SYN+ACK packet, potentially preventing device boot and leading to memory corruption.
CVE-2026-14606 — Stack-Based Buffer Overflow in RT-Thread CAN_Receive
1 CVEA stack-based buffer overflow vulnerability (CVE-2026-14606) exists in RT-Thread versions up to 5.0.2, specifically in the `CAN_Receive` function of the SWM341 CAN Handler component, allowing for local exploitation via manipulation, with a public exploit available.
CVE-2026-14605: RT-Thread Stack-based Buffer Overflow
1 TTP 1 CVEA stack-based buffer overflow vulnerability (CVE-2026-14605) exists in the `recvmsg` function of the `ls1c CAN Handler` component within RT-Thread up to version 5.0.2, requiring local access for exploitation and having a publicly available exploit, potentially leading to high impact on confidentiality, integrity, and availability.