Is CVE-2026-23747 actively exploited?

No active exploitation of CVE-2026-23747 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-23747 be exploited remotely?

Yes. CVE-2026-23747 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-23747?

CVE-2026-23747 has a CVSS score of 3.7 (LOW).

HOME VULNERABILITIESCVE-2026-23747

LOW

CVE-2026-23747

CWE-121Published: February 26, 2026· Updated: Feb 27, 2026

3.7

CVSS v3.1

EPSS:0.04%probability of exploitation in 30 daysPercentile:12.5th

Official Description

Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils. The golioth_payload_as_int() and golioth_payload_as_float() helpers copy network-supplied payload data into fixed-size stack buffers using memcpy() with a length derived from payload_size. The only length checks are guarded by assert(); in release builds, the asserts are compiled out and memcpy() may copy an unbounded payload_size. Payloads larger than 12 bytes (int) or 32 bytes (float) can overflow the stack, resulting in a crash/denial of service. This is reachable via LightDB State on_payload with a malicious server or MITM.

NVD Source

Technical Analysis

CVE-2026-23747 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.