CVE-2026-78012

CriticalCVSS 9.8/10Last modified Sep 8, 2026

Description

An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an error or warning. The result could be memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Pyramid SolutionsEtherNet/IP Adapter DLL Kit (EIPA)<= v5.6.1
Pyramid SolutionsEtherNet/IP Adapter DLL Kit with CIP Security (EIPA-SECURE)<= v5.6.1
Pyramid SolutionsEtherNet/IP Adapter Development Kit (EADK)<= v5.6.1
Pyramid SolutionsEtherNet/IP Adapter Development Kit with CIP Security (EADK-SECURE)<= v5.6.1
Pyramid SolutionsEtherNet/IP Scanner DLL Kit (EIPS)<= v5.6.1
Pyramid SolutionsEtherNet/IP Scanner DLL Kit with CIP Security (EIPS-SECURE)<= v5.6.1
Pyramid SolutionsEtherNet/IP Scanner Development Kit (ESDK)<= v5.6.1
Pyramid SolutionsEtherNet/IP Scanner Development Kit with CIP Security (ESDK-SECURE)< v5.6.1

References

Timeline

Published
Sep 1, 2026
Last modified
Sep 8, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-780136.3Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure DeCVE-2026-780155.3Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unaCVE-2026-780164.3Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vCVE-2026-780173.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional ConditCVE-2026-780187.1Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure DeCVE-2026-780198.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted ControCVE-2026-78028.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.2. ThCVE-2026-780208.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. ACVE-2026-780215.3Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive CVE-2026-780228.1Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerabiliCVE-2026-780238.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled KeyCVE-2026-780248.7Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability.
CVE-2026-78012: Critical severity, CVSS 9.8 | Vulnix