{"id":"CVE-2026-78846","kind":"vulnerability","aliases":["CVE-2026-78846"],"related":[],"title":"AiDot Linkind smart plug: SSDP header parsing overflow in firmware 1.01.32","description":"AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing.","summary":"The AiDot Linkind Matter Smart Plug firmware 1.01.32 has a buffer overflow in how it parses SSDP headers on the local network. The sources do not say what code runs or what an attacker gets beyond memory corruption.","severity":"unknown","cvss":null,"epss":0.0019,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aidot","infrastructure","iot","linkind","matter","smart-plug"],"not_affected_if":["other-firmware-version"],"how_to_check":"- Check the firmware version on the plug in the AiDot Linkind app: unknown if the sources do not say where it is shown\n- Confirm whether the plug is on the local network with SSDP enabled: unknown","fix":"- Update the AiDot Linkind Matter Smart Plug firmware to a version later than `1.01.32`: unknown if the sources name a fixed version\n- Restrict local network access to the plug until a fix is available: unknown","status":"open","published_at":"2026-10-22T15:17:06+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","triaged_at":"2026-10-25T05:00:30+00:00","updated_at":"2026-10-25T05:00:30+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T05:00:30Z","model":"claude-haiku-5-5","output":{"fix":"- Update the AiDot Linkind Matter Smart Plug firmware to a version later than `1.01.32`: unknown if the sources name a fixed version\n- Restrict local network access to the plug until a fix is available: unknown","reach":"network","title":"AiDot Linkind smart plug: SSDP header parsing overflow in firmware 1.01.32","impact":"medium","summary":"The AiDot Linkind Matter Smart Plug firmware 1.01.32 has a buffer overflow in how it parses SSDP headers on the local network. The sources do not say what code runs or what an attacker gets beyond memory corruption.","category":"infrastructure","nicknames":[],"who_cares":["aidot","linkind","matter","smart-plug","iot"],"confidence":0.4,"needs_auth":"unknown","worst_case":"Memory corruption on the plug, possibly code execution, reachable from the local network","analyst_note":"Find the vendor advisory or a fixed firmware version and confirm whether SSDP is on by default; the NVD entry gives no severity or CVSS.","how_to_check":"- Check the firmware version on the plug in the AiDot Linkind app: unknown if the sources do not say where it is shown\n- Confirm whether the plug is on the local network with SSDP enabled: unknown","needs_analyst":true,"not_affected_if":["other-firmware-version"],"who_is_affected":"Owners of AiDot Linkind Matter Smart Plug devices running firmware 1.01.32 are affected, since the flaw is in SSDP header parsing on the device. Attacks need a machine that can send SSDP traffic to the plug on the same local network. Owners of other plugs or devices from other vendors can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000646,"input_tokens":3311,"output_tokens":630,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-78846':14A,17A '1.01.32':11A,33B,69C 'aidot':1A,18B,27B,64C 'attack':59B 'beyond':61B 'buffer':36B,73C 'code':54B 'corrupt':63B 'cve':12A,15A 'firmwar':10A,32B 'get':60B 'header':6A,43B,78C 'infrastructur':19B 'iot':20B 'linkind':2A,21B,28B,65C 'local':46B,77C 'matter':22B,29B,66C 'memori':62B 'network':47B 'overflow':8A,37B,74C 'pars':7A,41B,79C 'plug':4A,25B,31B,68C 'run':55B 'say':52B 'smart':3A,24B,30B,67C 'smart-plug':23B 'sourc':49B 'ssdp':5A,42B,76C 'via':75C 'vulner':71C","nicknames":[],"mitigations":[],"who_affected":"Owners of AiDot Linkind Matter Smart Plug devices running firmware 1.01.32 are affected, since the flaw is in SSDP header parsing on the device. Attacks need a machine that can send SSDP traffic to the plug on the same local network. Owners of other plugs or devices from other vendors can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T15:17:06+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-78846","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78846","severity":null,"published_at":"2026-10-22T15:17:06+00:00","modified_at":"2026-10-22T17:40:46+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-78846","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-78846","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}