Live › vulnerability › CVE-2026-102212
Opengear IM72XX, CM71XX and ACM70XX console server firmware versions 4.8.0 through 5.5.2 contain a heap buffer overflow in the web interface. An unauthenticated remote attacker can send a crafted multipart POST to crash the index.cgi process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-31 16:36 UTC. All times on this page are UTC.
Teams running Opengear IM72XX, CM71XX or ACM70XX console servers on firmware 4.8.0 through 5.5.2 whose web interface is reachable by an attacker. The sources describe a crash of index.cgi, not code execution, and do not say whether the web interface is exposed by default.
No product ranges from the sources yet.
4.8.0 through 5.5.2.4.8.0 through 5.5.2 are affected; the NVD entry does not state a fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash the index.cgi process via a crafted multipart/form-data POST request containing an overlong Content-Disposition name field.
This page as .md · .json · in your agent: get_signal("CVE-2026-102212")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.