CVE-2026-10829CWE-121

A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier

High · published June 16, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier. This vulnerability stems from insufficient input validation of user-supplied input in the "Server location" parameter on the Basic settings page. An attacker could exploit this vulnerability by sending crafted input to the web service, resulting in memory corruption. Successful exploitation of this vulnerability could allow remote code execution on the target system with root privileges.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00472 · 39.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-06-16T10:18Z
EPSS history
Timeline
  • 16 JUN 10:18Z
    A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and earlier
    cvelistv5