CVE-2026-121603

The record

Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that allows malicious linked servers to corrupt memory by sending an overlong kill reason. Attackers controlling a rogue or compromised peer server can send a reason exceeding KILLLEN that overflows a static 512-byte buffer, crashing the ircd or potentially achieving remote code execution.

Affected packages

Related vulnerabilities

• CVE-2026-109161 Insufficient bounds checking in the Digital I/O function may allow a remote attacker with… CWE-120
• CVE-2026-76955 A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions… CWE-120
• CVE-2026-120057 psqlODBC copies the reply to a large-object read (loread) into the application's buffer… CWE-120
• CVE-2026-106804 A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn… CWE-120
• CVE-2026-120241 A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC… CWE-120
• CVE-2026-120226 A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll… CWE-120
• CVE-2026-119146 ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the… CWE-120
• CVE-2026-57191 Asterisk is an open source private branch exchange and telephony toolkit. CWE-120