CVE-2026-19933: fallo de gravedad media en DefaultFuction Customer-Relationship-Management…
DefaultFuction Customer-Relationship-Management-In-C-Project Customer Search gets stack-based overflow
Publicada el · Actualizada el
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 5.3epss 0.4%
probabilidad de explotación
0.4%top 64% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the function gets of the component Customer Search Module. This manipulation causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project confirms, that "it’s being processed".
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
DefaultFuction · Customer-Relationship-Management-In-C-ProjectPoCs públicas encontradas — 1
cve_referencegithub.com/DefaultFuction/Customer-Relationship-Management-In-C-Project/issues/1no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://github.com/DefaultFuction/Customer-Relationship-Management-In-C-Project/https://github.com/DefaultFuction/Customer-Relationship-Management-In-C-Project/issues/1https://vuldb.com/cve/CVE-2026-19933https://vuldb.com/submit/872649https://vuldb.com/vuln/390704https://vuldb.com/vuln/390704/cti