Stack-Based Buffer Overflow in Telnet/SSH CLI for Device

CVE-2026-22321

What is CVE-2026-22321?

A stack-based buffer overflow vulnerability exists in the Telnet/SSH command-line interface (CLI) login routine of certain devices. This flaw allows an unauthenticated attacker to send oversized or unexpected username input, leading to an overflow condition that disrupts the login process. Although this results in a crash of the thread handling the login attempt, it does not affect other active CLI sessions. As a consequence, the impact is characterized by a limited availability disruption.

References