CVE-2026-90442
NoneCVSS
—
EPSS
0.2%
Published
Oct 27, 2026
CISA due date
—
The record
A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary code by sending a specially crafted request.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-78402 Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys… CWE-121
- CVE-2026-78403 Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel… CWE-121
- CVE-2026-119086 Missing queue-set type validation in the queue-set selection system call in… CWE-121
- CVE-2026-119528 A flaw was found in GIMP. CWE-121
- CVE-2026-65584 Software installed and run as a non-privileged user may conduct improper GPU system calls… CWE-121
- CVE-2026-118609 Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code… CWE-121
- CVE-2026-118610 Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution… CWE-121
- CVE-2026-118605 Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code… CWE-121