Buffer Overflow Vulnerability in Keysight IxChariot Endpoint
CVE-2026-49435

9.3CRITICAL

Key Information:

Vendor

Keysight

Status
Hawkeye
Ixchariot
Ixtap
Ixprobe
Vendor
CVE Published:
4 August 2026

What is CVE-2026-49435?

The Keysight IxChariot Endpoint and associated products are susceptible to a stack-based buffer overflow vulnerability. This security flaw allows an unauthenticated remote attacker to craft and send a specially designed packet, which could potentially lead to the execution of arbitrary code with administrative privileges. Proper security measures and timely updates are essential to mitigate risks associated with this vulnerability.

Affected Version(s)

Hawkeye 0 < 6.0.7

IxByPass 0 < 3.13.0.69

IxChariot 0 < 10.0.254

References

https://www.keysight.com/us/en/lib/software-detail/comput...
release-notes
https://www.keysight.com/us/en/about/quality-and-security...
release-notes
https://www.keysight.com/us/en/lib/software-detail/comput...
release-notes

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

SĂ©bastien Charbonnier, ANSSI
.