Is CVE-2026-49035 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-49035?

CVE-2026-49035 has a CVSS v3 severity of HIGH (8.1).

Back

CVE-2026-49035

Description

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution (RCE) has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled.