Buffer Overflow Vulnerability in HMS Networks Ewon Flexy and Cosy Products
CVE-2026-25823

9.8CRITICAL

Key Information:

Vendor

HMS Networks

Status
Ewon Flexy and Cosy Devices
Vendor
CVE Published:
12 March 2026

What is CVE-2026-25823?

HMS Networks' Ewon Flexy and Cosy devices are affected by a stack buffer overflow vulnerability, allowing remote attackers to trigger a Denial of Service (DoS). Additionally, this flaw can be exploited to execute code remotely without authentication, potentially leading to unauthorized access and control over the affected devices. The vulnerability impacts specific firmware versions, underscoring the importance of maintaining updated device firmware to mitigate risks.

References

https://www.hms-networks.com/p/flexy20500-00ma-ewon-flexy...
https://hmsnetworks.blob.core.windows.net/nlw/docs/defaul...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.