CVE-2026-49435criticalCWE-121

CVE-2026-49435: falha crítica em Keysight IxChariot

Keysight IxChariot-related products stack-based buffer overflow

Publicada em 04 ago 2026

Seguir esta CVE + Monitorar IxChariot + Monitorar Hawkeye

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 1.4%

Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet and execute arbitrary code with administrative privileges.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Keysight · Hawkeye Keysight · IxByPass Keysight · IxChariot Keysight · IxProbe Keysight · IxTap

CVEs relacionadas — Keysight IxChariot

No mesmo produto, das mais perigosas para as menos.

CVE-2017-20242CRITICALKeysight IxChariot Endpoint stack-based buffer overflowEPSS 1.3%CVE-2017-20241CRITICALKeysight IxChariot Endpoint heap-based buffer overflowEPSS 1.3%

Referências

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-216-01.json https://www.cve.org/CVERecord?id=CVE-2026-49435 https://www.keysight.com/us/en/about/quality-and-security/security/product-and-solution-cyber-security/security-advisory-archive/security-advisory--ixchariot-vulnerability.html https://www.keysight.com/us/en/lib/software-detail/computer-software/hawkeye.html https://www.keysight.com/us/en/lib/software-detail/computer-software/ixchariot.html https://www.keysight.com/us/en/lib/software-detail/instrument-firmware-software/ixprobe.html https://www.keysight.com/us/en/product/IXTP-CU3-T/copper-taps---ixtp-cu3-t.html