EUVD-2026-26692CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionNVD
Buffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function parseCANFrame, and decoder.cpp in function decodeFrame allowing remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted CAN FD frames.
AnalysisAI
Remote code execution in cannelloni v2.0.0 allows unauthenticated network attackers to crash the service or execute arbitrary code by sending malformed CAN FD frames that trigger buffer overflows in two separate parsing functions (parseCANFrame in parser.cpp and decodeFrame in decoder.cpp). The CVSS score of 9.8 reflects network-accessible exploitation requiring no authentication or user interaction, with complete system compromise possible. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
24 hours: Isolate all cannelloni v2.0.0 instances from untrusted networks; document inventory of affected systems and their operational criticality. 7 days: Implement network segmentation restricting CAN frame traffic to trusted sources only; deploy network-based detection rules for malformed CAN FD frames; engage vendor for patch timeline confirmation. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today