CVE-2026-49033: The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code.

highCVSS 7.8CVE-2026-49033

The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: high — CVSS 7.8
Published: 2026-07-07
Last updated: 2026-07-09
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-49033

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-490330.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-49033	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

criticalLabcenter Proteus 9cisa

Recent advisories for application contains a

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

criticalCVE-2026-14480: OpenPLC Runtime v3 contains an authenticated arbitrary file write vulnerability in the legacy …nvd · 2026-07-10
highCVE-2026-13462: PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allow…nvd · 2026-07-09
mediumCVE-2026-56293: Capgo before 12.128.2 contains an authorization flaw in transfer_app() that fails to update de…nvd · 2026-07-08
highCVE-2026-57260: The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the …nvd · 2026-07-08
mediumCVE-2026-57255: The application opens a PDF containing an abnormal color space whose attributes reference a va…nvd · 2026-07-08
highCVE-2026-42958: The application contains a use-after-free vulnerability that can be exploited to cause memory …nvd · 2026-07-07