CVE-2006-2926

CVE-2006-2926 describes a stack-based buffer overflow in the WWW Proxy Server component of Qbik WinGate version 6.1.1.1077. This vulnerability allows remote attackers to trigger a denial of service and potentially execute arbitrary code by sending a crafted, excessively long URL in an HTTP request. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While not listed on CISA's KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, indicating readily accessible attack tools. Despite this, there is no evidence of active exploitation, nor significant community discussion or media coverage.