{"id":"CVE-2026-55362","kind":"vulnerability","aliases":["CVE-2026-55362"],"related":[],"title":"Out-of-bounds write from missing bounds check allows remote code execution","description":"In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"A missing bounds check in several files lets data be written past the end of a buffer. The NVD description says this can lead to remote code execution with no extra privileges and no user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:13+00:00","first_seen_at":"2026-11-10T20:46:06+00:00","triaged_at":"2026-11-10T20:53:57+00:00","updated_at":"2026-11-10T20:53:57+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-10T20:53:57Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Out-of-bounds write from missing bounds check allows remote code execution","impact":"high","summary":"A missing bounds check in several files lets data be written past the end of a buffer. The NVD description says this can lead to remote code execution with no extra privileges and no user interaction.","audience":"businesses","category":"other","nicknames":[],"who_cares":[],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Remote code execution on the affected system without extra privileges","analyst_note":"Identify the affected product and files from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-55362, then find the fixed versions and detection steps.","how_to_check":"unknown","plain_action":"","product_name":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000634,"input_tokens":4501,"output_tokens":367,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-55362':16A,19A 'addit':83C 'allow':10A 'bound':4A,8A,22B,66C,72C 'buffer':36B 'check':9A,23B,73C 'code':12A,46B,79C 'could':75C 'cve':14A,17A 'data':28B 'descript':39B 'due':68C 'end':33B 'execut':13A,47B,80C,84C 'exploit':93C 'extra':50B 'file':26B,58C 'interact':55B,88C 'lead':43B,76C 'let':27B 'miss':7A,21B,71C 'multipl':57C 'need':86C,91C 'nvd':38B 'out-of-bound':1A,63C 'past':31B 'possibl':62C 'privileg':51B,85C 'remot':11A,45B,78C 'say':40B 'sever':25B 'user':54B,87C 'write':5A,67C 'written':30B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["other","unknown"],"campaign_type":null,"search_a":"'-2026':15A,18A '-55362':16A,19A 'allow':10A 'bound':4A,8A 'check':9A 'code':12A 'cve':14A,17A 'execut':13A 'miss':7A 'out-of-bound':1A 'remot':11A 'write':5A","search_b":"'bound':22B 'buffer':36B 'check':23B 'code':46B 'data':28B 'descript':39B 'end':33B 'execut':47B 'extra':50B 'file':26B 'interact':55B 'lead':43B 'let':27B 'miss':21B 'nvd':38B 'past':31B 'privileg':51B 'remot':45B 'say':40B 'sever':25B 'user':54B 'written':30B","search_c":"'addit':83C 'bound':66C,72C 'check':73C 'code':79C 'could':75C 'due':68C 'execut':80C,84C 'exploit':93C 'file':58C 'interact':88C 'lead':76C 'miss':71C 'multipl':57C 'need':86C,91C 'out-of-bound':63C 'possibl':62C 'privileg':85C 'remot':78C 'user':87C 'write':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:13+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-55362","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55362","severity":null,"published_at":"2026-11-10T20:19:13+00:00","modified_at":"2026-11-10T20:19:13+00:00","first_seen_at":"2026-11-10T20:46:06+00:00","fetched_at":"2026-11-10T20:46:06+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}