{"id":"CVE-2026-19477","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-19477","generatedAt":"2026-10-28T00:53:09.651Z","title":"There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).","description":"There\nis stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).  This may result in information disclosure or arbitrary code\nexecution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1\nand prior versions.","published":"2026-09-17T19:16:41.000Z","lastModified":"2026-09-28T16:17:14.000Z","status":"Deferred","sourceIdentifier":"security@ni.com","cvss":{"version":"4.0","score":8.6,"severity":"HIGH","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-121"],"affected":[],"epss":{"score":0.00203,"percentile":0.10185,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.20%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://github.com/mccdaq/uldaq/security/advisories/GHSA-9jr3-33mw-g6jc","source":"security@ni.com"},{"url":"https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/stack-based-buffer-overflow-vulnerability-linux-uldaq.html","source":"security@ni.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-19477","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}