CVE-2018-10088

CVE-2018-10088 is a critical buffer overflow vulnerability affecting XiongMai uc-httpd 1.0.0, a web server often found in IoT devices. This flaw allows unauthenticated remote attackers to execute arbitrary code with maximum impact on confidentiality, integrity, and availability, as indicated by its CVSS score of 9.8. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB and Nuclei templates exist, suggesting a high likelihood of exploitation. The vulnerability has garnered significant community attention and media coverage, including reports of its use by malware like Satori and BotenaGo to compromise IoT devices.