CVE-2026-78012

Name of the Vulnerable Software and Affected Versions NetStaX EtherNet/IP Stack versions prior to 5.6.1

Description An issue exists where a large Class 3 explicit-message request can exceed the application-side receive buffer without triggering an error or warning. This can lead to memory corruption or a device crash, potentially serving as a remote attack vector since the originating device does not receive a Common Industrial Protocol (CIP) error indicating the request failed. There have been reports of elevated activities targeting the Pyramid Solutions EtherNet IP Adapter DLL Kit and other related products.

Recommendations Update NetStaX EtherNet/IP Stack to version 5.6.1 or later.