CVE-2026-6996

LowCVSS 2.4/10Last modified Jun 17, 2026

Description

A weakness has been identified in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This affects an unknown function of the component rmon event Tab. Executing a manipulation of the argument Description can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 2.4/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-79CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Apr 25, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-699637.8Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.CVE-2026-699647.0Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.CVE-2026-699667.8Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.CVE-2026-699675.5Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.CVE-2026-699686.5Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.CVE-2026-699694.7Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose CVE-2026-69972.4A security vulnerability has been detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This impacts an unknown function of the component New CVE-2026-699707.0Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.CVE-2026-699715.5Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.CVE-2026-699736.5Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perfCVE-2026-699744.7Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.CVE-2026-699767.5Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-6996: Low severity, CVSS 2.4 | Vulnix