Buffer Overflow Vulnerability in Plugin from Code-Projects
CVE-2026-7503

8.7HIGH

Key Information:

Vendor: Code-projects
Status: For Plugin
Vendor: CVE Published:; 30 April 2026

🔔 Create Code-projects Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-7503?

A security flaw has been identified in Code-Projects' Plugin, specifically within the function setWiFiMultipleConfig located in the library /lib/cste_modules/wireless.so of the /cgi-bin/cstecgi.cgi file. This vulnerability allows an attacker to manipulate the argument wepkey2, resulting in a buffer overflow condition. As a result, remote exploitation of this vulnerability is possible, thereby compromising the affected system. The exploit for this vulnerability is now publicly available, raising significant concerns for users of the affected Plugin versions.

Affected Version(s)

for Plugin 4.1.2cu.5137

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-7503 - Proof of Concept