PT-2026-27326
CVE-2026-4746
·
Publicado
2026-03-24
·
Atualizado
2026-03-24
Descrição por
CVSS 4.0
10
CríticaMétricasAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/S:N/AU:Y/R:U/V:C/RE:L/U:Amber
Name of the Vulnerable Software and Affected Versions
timeplus-io proton versions prior to 1.6.16
Description
An out-of-bounds write issue exists in the inflate.C file within the base/poco/Foundation/src modules of proton. This flaw is a heap smash, potentially leading to remote code execution. The issue is network-reachable and does not require authentication, potentially allowing for full system compromise.
Recommendations
Update to a version of timeplus-io proton version 1.6.16 or later.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾