HIGHVulnerability
CVE-2026-71265
Domoticz's MochadTCP::MatchLine handler for MOCHAD_RFSEC messages (hardware/MochadTCP.cpp) copies network-received data from the up-to-1028-byte m_mochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy with no length check, across three separate code branches (DS10A/KR10A/MS10A device types).
Properties
- severity
- HIGH
- score
- 7.5
- cve_id
- CVE-2026-71265
- vector
- CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- published_at
- 2026-08-05T13:24:50.720
- last_modified
- 2026-08-26T17:13:24.800
Related Entities (2)
HAS_WEAKNESS (1)
→[Weakness]Stack-based Buffer Overflow
DESCRIBED_BY (1)
→[Source]NVD
Explore deeper with Ninja Signal's threat intelligence graph