CVE-2026-75350
waiting for further signalsZero needs more public information before it can validate it.GHSA-p3x9-82v4-vwmr ↗EUVD-2026-95960 ↗
description
OpENer version 2.3 and the referenced master commit are affected by a buffer overflow in EtherNet/IP Get_Attribute_List request handling. A remote attacker able to reach the service may cause a denial of service.
mitigation
Restrict EtherNet/IP service access to trusted network hosts and segment affected devices from untrusted networks. No fixed version is identified in the evidence; monitor upstream remediation and upgrade when a corrected release is available.
outcome
No artifact: an exploit or check was attempted but could not be produced at this moment.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-09 00:00Zghsa: trigger signal, started the run
- 2026-10-09 00:00Zcve.org record for CVE-2026-75350
this entry in the feed
GET /api/v1/feed/CVE-2026-75350
{ "etk_id": "ETK-2026-1125", "cve_id": "CVE-2026-75350", "display_id": "CVE-2026-75350", "ghsa_id": "GHSA-p3x9-82v4-vwmr", "euvd_id": "EUVD-2026-95960", "status": "published", "anchor_state": "anchored", "title": "Buffer overflow in OpENer GetAttributeList handling", "summary": "OpENer version 2.3 and the referenced master commit are affected by a buffer overflow in EtherNet/IP Get_Attribute_List request handling. A remote attacker able to reach the service may cause a denial of service.", "mitigation": "Restrict EtherNet/IP service access to trusted network hosts and segment affected devices from untrusted networks. No fixed version is identified in the evidence; monitor upstream remediation and upgrade when a corrected release is available.", "vendor": null, "product": "OpENer", "affected": [ { "affected_notes": [ "n/a" ], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "n/a", "purl": null } ], "cwes": null, "cvss_score": 7.5, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "epss_score": 0.0048, "epss_percentile": 0.3982, "epss_asof": "2026-10-20", "automation": "deterministic", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 44.043595466666666, "t0_at": "2026-10-09T00:00:00+00:00", "signals": { "trigger_signal": { "at": "2026-10-09T00:00:00+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-09T00:00:00+00:00", "url": "https://github.com/advisories/GHSA-p3x9-82v4-vwmr" } } }
published 2026-10-10 02:13Z
last change 2026-10-21 04:45Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.