What’s Vulnerable › Vulnerabilities

CVE-2026-42469

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-01 · updated 2026-06-17
• Weakness: CWE-121

Description

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted CANswitch frames.

Affected products

• Openvehicles Open Vehicle Monitoring System Firmware: 3.3.005

References

• https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381
• https://github.com/openvehicles/Open-Vehicle-Monitoring-System-3/issues/1391

Get alerted when CVE-2026-42469 or the next vulnerability affects your stack