CVE-2026-32961

CVE-2026-32961 is a heap-based buffer overflow vulnerability affecting Silex Technology's SD-330AC and AMC Manager products, specifically within the sx_smpd packet data processing component. The flaw can be triggered by a specially crafted network packet to cause temporary denial-of-service conditions. The vulnerability carries a CVSS 3.1 score of 5.3 (Medium severity) with a network-based attack vector requiring no authentication or user interaction, making it easily exploitable by remote threat actors. However, the impact is limited to availability disruption, with no confidentiality or integrity implications. Exploitation status remains low, as CVE-2026-32961 is not listed on the CISA Known Exploited Vulnerabilities catalog and shows minimal community attention with an exceptionally low EPSS score of 0.0002, indicating negligible real-world exploitation probability. No public exploit code is currently known to be circulating, and the vulnerability remains inactive on active threat tracking lists.