CVE-2026-122130

Name of the Vulnerable Software and Affected Versions CESNET ipfixcol2 versions 2.3.0 through 2.8.x

Description An integer overflow exists in the Forwarder output plugin. Unauthenticated IPFIX exporters can trigger a heap buffer overflow by wrapping uint16 t message length counters. This occurs when attackers send large templates and data sets near 65,535 bytes to a collector forwarding over TCP, potentially leading to a system crash or allowing 2-byte writes to addresses influenced by the attacker.

Recommendations Update to version 2.9.0 or later.