CVE-2026-13592
- Source
- https://cve.org/CVERecord?id=CVE-2026-13592
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-13592.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-13592
- Published
- 2026-06-29T17:15:11Z
- Modified
- 2026-10-28T11:07:32Z
- Severity
-
- 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
- Summary
- liftoff-sr CIPster EtherNet IP Message append out-of-bounds write
- Details
-
A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. Affected by this issue is the function BufWriter::append of the component EtherNet IP Message Handler. Performing a manipulation results in out-of-bounds write. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The patch is named 3a0159ed43125dcd024a1965f0289cb186bae9ff. To fix this issue, it is recommended to deploy a patch.
- Database specific
{ "cna_assigner": "VulDB", "cwe_ids": [ "CWE-119", "CWE-787" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/13xxx/CVE-2026-13592.json" }- References
-
- https://github.com/liftoff-sr/CIPster/
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/13xxx/CVE-2026-13592.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-13592
- https://vuldb.com/cve/CVE-2026-13592
- https://vuldb.com/submit/844566
- https://vuldb.com/vuln/374596
- https://github.com/liftoff-sr/CIPster/issues/48
- https://github.com/liftoff-sr/CIPster/issues/48#issuecomment-4596727632
- https://vuldb.com/vuln/374596/cti
- https://github.com/liftoff-sr/CIPster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff
- https://github.com/user-attachments/files/28452971/poc.zip
Affected packages
Git / github.com/liftoff-sr/cipster
Affected ranges
- Type
- GIT
- Repo
- https://github.com/liftoff-sr/cipster
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "e8e9dba09bf56962807d3504b783ccdb6287f3e4" }, { "last_affected": "e8e9dba09bf56962807d3504b783ccdb6287f3e4" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "fixed": "3a0159ed43125dcd024a1965f0289cb186bae9ff" } ], "source": "REFERENCES_COMMIT" } ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-13592.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"80875072057080509036186176058437858928",
"14617404290855322782857169046682006503",
"124101157758117114223051937163067778527",
"169815666440035381176192743123191322395",
"263328179008536668823450393359120293166",
"328440660254280030517018641302159241098",
"289102619349704312353860407502364051404",
"75797506476555726662458531394189143112",
"131881438119064188721555901271880823690",
"123901524081482993908242824946654049338",
"252428552380698027918060223833344747408",
"249872404403592701293351639413935212774",
"191157432998756923450156238890197218653",
"313950124676425309635437972294533077268",
"236566373244828456867593925634324292564",
"52671723687730383694258237269868383141",
"33335872040835101874609107621459365750",
"245892191017454336124539570280810956103",
"202778013385142694786607522636779465911",
"83034799010350392497927571993170708075",
"196430282115428081462018002505067701814",
"147423465282163141817055929234726699587",
"76580386485421855752932638296645974939",
"72425170630439478327028167582371293120",
"198164166699987498226132911217662618529",
"107175248287261919162575932710275948601",
"137483394281622945154588369508384582436",
"143531600830898131797244278639053686086",
"62939915226265313572311431051927936223",
"182583085393090542078143200856077172721",
"57702820002836275872152812590082445761",
"335014878697228030818374496543289505321",
"295258469621166219630368610044518379785",
"277432156993160574189481068366101993898",
"40957518126752152821004967516583560557",
"158485689370899997930511594447379782581",
"279508180620353619248162783640541723288",
"6056946129198560399284605550416691348",
"163529903629706153728437454410908962384",
"136109562158529559950343643450388088052",
"142071965971750517886253923951635834771",
"89677808098582828980205400568182213668",
"72425170630439478327028167582371293120",
"198164166699987498226132911217662618529",
"107175248287261919162575932710275948601",
"137483394281622945154588369508384582436",
"143531600830898131797244278639053686086",
"62939915226265313572311431051927936223",
"182583085393090542078143200856077172721",
"285264281447942374415496105994268226640",
"118893619209479374681265870300782414484",
"131841200672895939528542719041228828540",
"319123663701329278888383812090387948234",
"39962512581392817047486494751563948220",
"54605729503365029028950013060634918679",
"179621424098202520668279717332705007993",
"40111782005010222403604008002639467917"
],
"threshold": 0.9
},
"id": "CVE-2026-13592-0009646d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/cipclass.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"337618275767429125583615742446692716973",
"18379829157478602115990283716744143095",
"184018353427689232748977990812945972907",
"338568884780284404637844632596508188759"
],
"threshold": 0.9
},
"id": "CVE-2026-13592-0133761e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/cipassembly.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "183618015643852231515077634839698088140",
"length": 844
},
"id": "CVE-2026-13592-03fab46c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/cipclass.cc",
"function": "CipClass::AttributeInsert"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "170206298674015196734339876392615548192",
"length": 352
},
"id": "CVE-2026-13592-60a495eb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/cipclass.cc",
"function": "CipClass::AttributeInsert"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "317358735660333546073164607173484249409",
"length": 365
},
"id": "CVE-2026-13592-74abbc22",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/cipclass.cc",
"function": "CipClass::AttributeInsert"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"327187305304982113446409852900381728073",
"197213326940807064919968822863535077109",
"100770434453712876362317447312671636501",
"165457300885181048406475744680685623392",
"15984170328105597513931041023889844755",
"274889856002694023271622153300636505046",
"304139412688712526794730875114141692294",
"845877265268664713834149825166818889",
"48484176992772350429207395430442117594",
"16575762199026842079430275110329961955"
],
"threshold": 0.9
},
"id": "CVE-2026-13592-89bf13da",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/cipidentity.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"152147963181780917198006934762358272694",
"319797100892664831936645272651596110866",
"77907284695453565610204957133817330633",
"145572707065465256404830834623564628996",
"260699710764187507595000736845240565629",
"290073865659553267610002349637897387367",
"191943415900529337382440353278310218611",
"134442513269871355368643488182431971589",
"192835381487863894552087033676326752460"
],
"threshold": 0.9
},
"id": "CVE-2026-13592-96fdef81",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/ciptcpipinterface.cc"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"16177438410153809580505575973477304195",
"197561724031257108251989622255391628699",
"115558931154681807837742026923392980097",
"206872399112006841827168829050662500910",
"282685794671169469529660291906998167742",
"181577622085738246053524236062616993147",
"4468375315811820379322509270596237357",
"267188169235849690247061717904783508970",
"338501233412876304971733540846062213356",
"103666190767219889445672935680808439749",
"4468375315811820379322509270596237357",
"267188169235849690247061717904783508970",
"146226679438860856195256426549597292520",
"246978006444684973613022807466224310491",
"305500983893880736306014455626889099624",
"263725552146526880947526512245467474646",
"88446849950264131263814819590380188394",
"270205555476251359506555958101178604791",
"156659588432959048947604535598279379550",
"298079092824487323320902398711990015648",
"223727712258498693787081595708200026054",
"20870198616618779403625981948579726344",
"260725447362642114368404511347002655010",
"53372567924754025092254393668304945790"
],
"threshold": 0.9
},
"id": "CVE-2026-13592-9a6d8bf6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/cipclass.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "21514829860865947120958467344155740987",
"length": 578
},
"id": "CVE-2026-13592-9a7939c4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/cipidentity.cc",
"function": "CipIdentityClass::CipIdentityClass"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"206649143755189952320163767662773496467",
"290852537497105941825697735408428570204",
"152574574896495262632673728469694583108",
"317015587517616721583451083988886007053",
"117334433899208236528049644273271027818",
"116740276322617614342504438804116297482"
],
"threshold": 0.9
},
"id": "CVE-2026-13592-9e058e41",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/cipethernetlink.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "263899009033031571675150524620680207139",
"length": 1236
},
"id": "CVE-2026-13592-b611f397",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/cipclass.cc",
"function": "CipClass::CipClass"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "134689754787434643773147939077779804502",
"length": 346
},
"id": "CVE-2026-13592-c4874bc1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/cipassembly.cc",
"function": "CipAssemblyClass::CipAssemblyClass"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "204656799608268079389845409926745070300",
"length": 346
},
"id": "CVE-2026-13592-de930b5b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/liftoff-sr/cipster/commit/3a0159ed43125dcd024a1965f0289cb186bae9ff",
"target": {
"file": "source/src/cip/cipethernetlink.cc",
"function": "CipEthernetLinkClass::CipEthernetLinkClass"
}
}
]
vanir_signatures_modified
"2026-10-28T11:07:32Z"