Tag
lwIP SNMPv3 USM Handler Stack-Based Buffer Overflow (CVE-2026-8836)
2 rules 3 TTPs 1 CVEA stack-based buffer overflow vulnerability (CVE-2026-8836) exists in lwIP up to version 2.2.1 within the snmpv3 USM Handler, allowing remote attackers to execute arbitrary code by manipulating the `msgAuthenticationParameters` argument in the `snmp_parse_inbound_frame` function.
F5 BIG-IP CVE-2026-42924 iControl SOAP SNMP Configuration Privilege Escalation
1 rule 1 TTP 1 CVECVE-2026-42924 allows an authenticated attacker with Resource Administrator or Administrator privileges to escalate privileges by creating malicious SNMP configuration objects through iControl SOAP.
F5 BIG-IP and BIG-IQ iControl REST/TMOS Shell Privilege Escalation Vulnerability (CVE-2026-40698)
2 rules 1 TTP 1 CVECVE-2026-40698 allows a highly privileged, authenticated attacker with Resource Administrator privileges in F5 BIG-IP and BIG-IQ systems to create SNMP configuration objects via iControl REST or TMOS shell (tmsh), resulting in privilege escalation.
Cisco SG350 and SG350X Series Managed Switches SNMP Denial-of-Service Vulnerability
2 rules 1 TTPA remote, authenticated attacker can cause a denial-of-service condition on vulnerable Cisco SG350 and SG350X Series Managed Switches by sending a crafted SNMP request due to improper error handling.