CVE-2026-32955

CVE-2026-32955 is a stack-based buffer overflow vulnerability affecting Silex Technology's SD-330AC and AMC Manager products that arises from improper processing of redirect URLs, potentially enabling arbitrary code execution on affected devices. The vulnerability carries a HIGH severity rating of 8.8 CVSS with a network-based attack vector requiring low complexity and user authentication, resulting in complete compromise of confidentiality, integrity, and availability. Exploitation requires network access and valid credentials but no user interaction, making it moderately accessible to authenticated threat actors. Current indicators suggest the vulnerability is not actively exploited in the wild, with no publicly available exploit code and minimal community attention as evidenced by its absence from the Known Exploited Vulnerabilities catalog and inactive status on security watch lists. The FAUCET risk score of 52.0/100 and extremely low EPSS score indicate this remains a lower-priority threat despite its technical severity.