What is CVE-2026-82945?

CVE-2026-82945 is a medium-severity vulnerability, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 6.5/10. Published 2026-10-26.

How severe is CVE-2026-82945?

Medium severity. CVSS v3 base score is 6.5 out of 10.

CVE-2026-82945

CVE-2026-82945

SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device can cause memory corruption. The software writes configuration data to a fixed-size array without checking if the array index exceeds its maximum size of EC_MAXFMMU entries. A device presenting more than EC_MAXFMMU configuration blocks can force writes beyond the array boundary, corrupting adjacent memory structures and potentially disrupting subsequent operations.

Vulnerability class: Buffer Overflow

Published 2026-10-26 · last modified 2026-10-26.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Weakness classification (CWE)

References

a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (vendor-advisory)

Frequently asked questions

What is CVE-2026-82945?: CVE-2026-82945 is a medium-severity vulnerability, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 6.5/10. Published 2026-10-26.
How severe is CVE-2026-82945?: Medium severity. CVSS v3 base score is 6.5 out of 10.