CVE-2026-5435

HighCVSS 7.3/10Last modified Nov 11, 2026

Description

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
The GNU C Library	glibc	>= 2.2, <= *
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.5, < V3.1.6
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.5, < V3.1.6
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	>= V3.1.5, < V3.1.6
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	>= V3.1.5, < V3.1.6
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.5, < V3.1.6

References

Timeline

Published: Apr 28, 2026
Last modified: Nov 11, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-543509.8Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app reads every docume CVE-2026-543519.6Budibase is an open-source low-code platform. Prior to 3.39.9, the webhook trigger endpoint in Budibase is publicly accessible and passes th CVE-2026-543529.6Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at packages/server/src/api/routes/static.ts:24 ac CVE-2026-543537.1Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF bl CVE-2026-543548.2MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappo CVE-2026-543555.3MapServer is a system for developing web-based GIS applications. From 6.0 until 8.6.4, MapServer's OpenLayers HTML output for SERVICE=WMS&RE CVE-2026-543567.1Budibase is an open-source low-code platform. Prior to 3.41.3, POST /api/attachments/:datasourceId/url in packages/server/src/api/routes/sta CVE-2026-543575.1An improper authorization vulnerability in MISP allowed an authenticated organization administrator to access or modify user settings belong CVE-2026-543587.5An incorrect authorization vulnerability in MISP allows an organization administrator to target site administrator accounts belonging to the CVE-2026-543597.1MISP contains an insecure default configuration in which the Security.check_sec_fetch_site_header control is disabled. When this setting is CVE-2026-54368.1The MW WP Form plugin for WordPress is vulnerable to Arbitrary File Move/Read in all versions up to and including 5.1.1. This is due to insu CVE-2026-543608.4A mass assignment vulnerability exists in MISP’s sharing group creation endpoint. When creating a new sharing group, the controller did not