ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 3h Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · 5h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 9h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 9h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 9h Vulnerability in Sparx Systems Enterprise Architect software · 10h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 10h Vulnerabilities in Slican telephone exchanges · 11h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 14h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 14h ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 3h Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · 5h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 9h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 9h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 9h Vulnerability in Sparx Systems Enterprise Architect software · 10h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 10h Vulnerabilities in Slican telephone exchanges · 11h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 14h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 14h

ACyber Sentinel Security Assessment Team

← Back to feed

⚠️ Vulnerability Report

CVE-2026-101337

HIGH CVSS 8.7 CVSS 4.0 📌 Received

CVE-2026-101337 - Stack overwrite from specially formatted base64 RDATA field

When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is secondary, will not be formatted like this. The zone file must be fed to NSD directly, (but it could come, for example, from an operator controlled provisioning system).

Published: Oct 14, 2026 11:16

Last Modified: Oct 14, 2026 14:17