{"id":"CVE-2026-0993","published":"2026-10-15T01:19:27.290","lastModified":"2026-10-16T18:25:45.343","description":"SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP server's multipart/form-data boundary parser to cause the device to become fully unresponsive — dropping all management access and traffic forwarding during its self-recovery cycle.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-120"],"vendors":[],"products":[],"references":[{"url":"https://hml.io/posts/blog-post-cve-2026-0993/","tags":[]},{"url":"https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-buffer-overflow-dos-via-multipart-boundary-parser","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}