{"id":"CVE-2026-58966","kind":"vulnerability","aliases":["CVE-2026-58966"],"related":[],"title":"hppsfilter.c: stack buffer overflow lets a local user gain higher privileges","description":"In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"Several functions in hppsfilter.c can write past the end of a stack buffer. An attacker with a local account could use this to escalate their privileges.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","unknown-product"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:52+00:00","first_seen_at":"2026-11-02T20:35:34+00:00","triaged_at":"2026-11-02T20:38:30+00:00","updated_at":"2026-11-02T20:38:30+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-02T20:38:30Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"hppsfilter.c: stack buffer overflow lets a local user gain higher privileges","impact":"high","summary":"Several functions in hppsfilter.c can write past the end of a stack buffer. An attacker with a local account could use this to escalate their privileges.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["unknown-product"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated privileges on the machine","analyst_note":"Identify the product that ships hppsfilter.c and its fixed versions via https://nvd.nist.gov/vuln/detail/CVE-2026-58966.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The sources do not name the product or versions that ship hppsfilter.c. Teams should look for it in the systems they run and check which local accounts can reach them. unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000605,"input_tokens":4100,"output_tokens":390,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-58966':14A,17A 'account':40B 'addit':78C 'attack':36B 'bound':60C 'buffer':3A,34B,66C 'could':41B,69C 'cve':12A,15A 'due':62C 'end':30B 'escal':45B,73C 'execut':79C 'exploit':88C 'function':23B,50C 'gain':9A 'higher':10A 'hppsfilter.c':1A,25B,52C 'infrastructur':18B 'interact':83C 'lead':70C 'let':5A 'local':7A,39B,72C 'multipl':49C 'need':81C,86C 'out-of-bound':57C 'overflow':4A,67C 'past':28B 'possibl':56C 'privileg':11A,47B,75C,80C 'product':21B 'sever':22B 'stack':2A,33B,65C 'unknown':20B 'unknown-product':19B 'use':42B 'user':8A,82C 'write':27B,61C","nicknames":[],"mitigations":[],"who_affected":"The sources do not name the product or versions that ship hppsfilter.c. Teams should look for it in the systems they run and check which local accounts can reach them. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","unknown","unknownproduct"],"first_public_at":"2026-11-02T20:17:52+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58966","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58966","severity":null,"published_at":"2026-11-02T20:17:52+00:00","modified_at":"2026-11-02T20:17:52+00:00","first_seen_at":"2026-11-02T20:35:34+00:00","fetched_at":"2026-11-02T20:35:34+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}