{"id":"CVE-2026-82947","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-82947","generatedAt":"2026-10-28T04:35:18.326Z","title":"SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause the master to read data outside allocated buffers.","description":"SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause the master to read data outside allocated buffers. The software uses length and offset values from device messages without validating them against buffer sizes. This can cause the master to access invalid memory locations, potentially disclosing sensitive information or causing crashes.","published":"2026-10-26T09:16:36.000Z","lastModified":"2026-10-26T13:45:22.000Z","status":"Awaiting Analysis","sourceIdentifier":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","cvss":{"version":"3.1","score":7.1,"severity":"HIGH","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L"},"cwe":["CWE-125","CWE-129","CWE-191","CWE-787"],"affected":[],"epss":{"score":0.0017,"percentile":0.064,"date":"2026-10-27","history":[{"date":"2026-10-26","score":0.0017,"percentile":0.06395}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.17%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-26T09:16:36.000Z","detail":{"score":"7.1","severity":"HIGH","publishedAt":"2026-10-26T09:16:36.473Z"},"summary":"New CVE, high severity (CVSS 7.1)."}],"references":[{"url":"https://rt-labs.com/wp-content/uploads/2026/10/RRTL-260921-01.pdf","source":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-82947","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}