CVE-2026-19477

8.6 highEPSS 0.2%

High (8.6). EPSS 0.2% chance of exploitation in the next 30 days.

There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This may result in information disclosure or arbitrary code execution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1 and prior versions.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-121
Published: 2026-09-17
Modified: 2026-09-28
Record from: the NVD, synced 2026-10-19

References

https://github.com/mccdaq/uldaq/security/advisories/GHSA-9jr3-33mw-g6jc
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/stack-based-buffer-overflow-vulnerability-linux-uldaq.html

Check your stack JSON