CVE-2026-75421

MediumCVSS 4.0/10Last modified Sep 8, 2026

Description

aria2 <=1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine() function.

Metrics

CVSS 3.1 4.0/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-121

Affected software

No affected versions have been published.

Timeline

Published
Aug 25, 2026
Last modified
Sep 8, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-754299.8PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the SeCVE-2026-75437.2The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fields' parameter in versions up to, and includingCVE-2026-754309.8PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication on the CVE-2026-754319.1PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-based authentication. This allows a remote aCVE-2026-754325.1An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent(), and ScannCVE-2026-754387.5Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs_sbi_time_parse() functionCVE-2026-754397.5An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF componentCVE-2026-75444.3The Mux Video Uploader plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 via CVE-2026-75457.3A weakness has been identified in SourceCodester Advanced School Management System 1.0. The affected element is an unknown function of the fCVE-2026-754588.1The teacher-end interface POST /api/teacher/user/delete/{id} in XueZhiSi Open Source Exam System <= 3.9.0 contains a vertical privilege escaCVE-2026-75469.8A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. The impacted element is the function find_host_ip of tCVE-2026-754606.5XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/
CVE-2026-75421: Medium severity, CVSS 4.0 | Vulnix