Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-86714

PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman

CVSS 4.0 5.3 MEDIUMCVSS 3.1 5.4 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-86714

Published

PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to validate interface name length. Attackers can supply interface names of 74 bytes or more via the -i option to read beyond buffer boundaries, leaking stack memory to console output or writing it into persistent network configuration files.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-86714

Published

PX4-Autopilot

https://github.com/PX4/PX4-Autopilot

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "PX4",
                    "product": "PX4-Autopilot",
                    "defaultStatus": "unaffected",
                    "packageURL": "pkg:github/PX4/PX4-Autopilot",
                    "collectionURL": "https://github.com/PX4/PX4-Autopilot",
                    "repo": "https://github.com/PX4/PX4-Autopilot",
                    "versions": [
                        {
                            "version": "0",
                            "lessThanOrEqual": "1.17.0",
                            "status": "affected",
                            "versionType": "semver"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON