Quest NetVault Backup nvpmgr flaw allows unauthenticated remote denial of service
ZDI scores the integer underflow CVE-2026-13270 at 7.5 and does not name a fix.
Stories per day · 30 days
2 RSS
10 stories, newest first · one card per story
Stories tagged #integer-underflow
Linux kernel IPv6 AH routing header bug enables local privilege escalation
ZDI rates CVE-2026-80844 at CVSS 8.8; an attacker needs low-privileged code execution first.
Critical MikroTik RouterOS Flaw Lets Unauthenticated Attackers Execute Code as Root
Unauthenticated MikroTik RouterOS flaw CVE-2026-84411 could let remote attackers execute code as root.
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
CISA warns MikroTik RouterOS below 7.24 has critical pre-auth RCE CVE-2026-84411, with no known exploitation.
Critical MikroTik RouterOS Vulnerability Exposes Devices to Remote Code Execution
CISA warns unauthenticated attackers can exploit critical MikroTik RouterOS flaw CVE-2026-84411 for remote code execution.
MikroTik RouterOS
Unauthenticated integer underflow in MikroTik RouterOS before 7.24 can give remote root code execution.
ZDI-26-672: Adobe Acrobat Reader DC PDF File Parsing Integer Underflow Information Disclosure Vulnerability
ZDI disclosed CVE-2026-81977, an integer underflow in Adobe Acrobat Reader DC PDF parsing that enables sensitive information disclosure.
ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability
ZDI disclosed CVE-2026-50696, a CVSS 8.1 integer underflow in Windows IKEv2 AES-GCM decryption enabling unauthenticated remote code execution on specific IPsec configurations.
[dos] Nmap 7.99 - Extension Header Integer Underflow
A proof-of-concept denial-of-service exploit for Nmap 7.99 leverages an integer underflow in extension header parsing to crash the scanner.
ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability
An unauthenticated integer underflow (CVE-2026-27654, CVSS 8.1) in NGINX's HTTP Dav module alias directive enables remote code execution.