HIGH

CVE-2026-71265

2026-08-05 CVSS v3.1

CVSS

7.5

Description

Domoticz's MochadTCP::MatchLine handler for MOCHAD_RFSEC messages (hardware/MochadTCP.cpp) copies network-received data from the up-to-1028-byte m_mochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy with no length check, across three separate code branches (DS10A/KR10A/MS10A device types).

Weakness (CWE)

CWE-121 Stack-based Buffer Overflow

EPSS Score

0.19%

Probability of exploitation in next 30 days

9.2th percentile

References

https://github.com/domoticz/domoticz https://github.com/domoticz/domoticz/blob/master/hardware/MochadTCP.cpp

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE