First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-32955

HighCVSS 8.8/10Last modified Oct 26, 2026

Description

SD-330AC and AMC Manager provided by silex technology, Inc. contain a stack-based buffer overflow vulnerability in processing the redirect URLs. Arbitrary code may be executed on the device.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
silex technology, Inc.	SD-330AC	Ver.1.42 and earlier
silex technology, Inc.	AMC Manager	Ver.5.0.2 and earlier

References

Timeline

Published: Apr 20, 2026
Last modified: Oct 26, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-329569.8SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in processing the redirect UR CVE-2026-329575.3SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue on firmware mainten CVE-2026-329586.5SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An administrative user may be directed to ap CVE-2026-329595.9SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a use of a broken or risky cryptographic algorithm. Inform CVE-2026-32969.8The Everest Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.3 via deserialization CVE-2026-329606.5SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a sensitive information in resource not removed before reu CVE-2026-329615.3SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in packet data processing of CVE-2026-329625.3SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configu CVE-2026-329635.1SD-330AC and AMC Manager provided by silex technology, Inc. contain a reflected cross-site scripting vulnerability. When a user logs in to t CVE-2026-329646.5SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerab CVE-2026-329657.5Initialization of a resource with an insecure default vulnerability exists in SD-330AC and AMC Manager provided by silex technology, Inc. Wh CVE-2026-329669.8DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affect

CVE-2026-32955: High severity, CVSS 8.8 | Vulnix