CVE-2026-6643

CriticalCVSS 9.9/10Last modified Jun 17, 2026

Description

A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unbounded sscanf() and passing user-controlled data directly to printf(). Due to the lack of PIE and Stack Canary protections, an authenticated remote attacker can exploit these to execute arbitrary code as the web server user. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RR42 as well as from ADM 5.0.0 through ADM 5.1.2.REO1.

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

No affected versions have been published.

Timeline

Published
Apr 20, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-664308.5Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.CVE-2026-664317.5Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) <= 1.0.7 versions.CVE-2026-664327.5Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.CVE-2026-664336.5Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions.CVE-2026-664346.5Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions.CVE-2026-664355.9Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive DCVE-2026-664369.3Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.CVE-2026-664374.9Contributor Server Side Request Forgery (SSRF) in Feedzy <= 5.2.4 versions.CVE-2026-664385.3Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions.CVE-2026-664397.1Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions.CVE-2026-66449.1A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrative user to break outCVE-2026-664407.1Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions.
CVE-2026-6643: Critical severity, CVSS 9.9 | Vulnix