cveboard RSS feed

CVE-2026-49868

Critical

RIOT-OS RIOT

  • RIOT-OS RIOT
  • Critical
  • CVSS 9.8
  • EPSS 0.37%
  • No fixed version listed

What to do

No fixed version listed

Plain text

Affected products

ProductAffectedFixed in
RIOT-OS RIOT< 2026.07None listed

Scores and signals

Exploitation
No known exploitation
Severity
Critical, CVSS 9.8 (v3.1, scored by GitHub_M)
EPSS
0.37% chance of exploitation in the next 30 days (EPSS from FIRST, as of Oct 24, 2026)
CISA's SSVC decision points
Exploitation: none. Automatable: no. Technical impact: total. As of Oct 21, 2026.
Weakness
CWE-125: Out-of-bounds Read; CWE-191: Integer Underflow (Wrap or Wraparound)
Vendor
RIOT-OS, RIOT

Timeline

  1. First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.

Sources

All live incidents