CVE-2026-49435
Received Received - Intake

Stack-Based Buffer Overflow in Keysight IxChariot Endpoint

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government

Description
Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet and execute arbitrary code with administrative privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-25
AI Q&A
2026-08-04
EPSS Evaluated
2026-08-23
NVD
CVE-2026-49435
EUVD
EUVD-2026-52870

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
keysight ixchariot *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Keysight IxChariot Endpoint and related products have a stack-based buffer overflow vulnerability. An unauthenticated remote attacker can exploit this by sending a specially crafted packet to execute arbitrary code with administrative privileges.

Detection Guidance

Detection requires monitoring network traffic for malformed packets targeting Keysight IxChariot endpoints. Use packet capture tools like tcpdump or Wireshark to inspect traffic for unusual payloads. Check system logs for crashes or administrative privilege escalations. Ensure IxChariot services are running the latest patched versions.

Impact Analysis

This vulnerability allows an attacker to gain full administrative control over affected systems without authentication. This could lead to complete system compromise, data theft, or further network infiltration.

Compliance Impact

The vulnerability allows unauthenticated remote attackers to execute arbitrary code with administrative privileges, which could lead to unauthorized access, data breaches, or system compromise. This could violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data security) by exposing sensitive information or failing to maintain system integrity.

Mitigation Strategies

Apply the latest security patches from Keysight for IxChariot Endpoint and associated products to address the stack-based buffer overflow vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-49435. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart