CVE-2026-102212

HIGH 8.4CVE-2026-102212 · Published 31/10/2026 · updated 06/11/2026

In short

CVE-2026-102212 is a HIGH (CVSS 8.4) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 25.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash the index.cgi process via a crafted multipart/form-data POST request containing an overlong Content-Disposition name field.

References

portal.opengear.com/customerservice/s/article/CVE-2026-102212-Opengear-Console-Server-Buffer-Overflow-to-RCE
portal.opengear.com/customerservice/s/article/Release-Notification-Firmware-Version-5-5-3-is-Now-Generally-Available

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free