CVE-2026-34865

CVE-2026-34865 is an out-of-bounds write vulnerability affecting the WEB module, with a critical CVSS score of 9.1. The vulnerability requires no authentication or user interaction and can be exploited over the network with low complexity, making it relatively easy for attackers to target vulnerable systems. Successful exploitation compromises both confidentiality and availability by allowing attackers to write to unauthorized memory locations. The vulnerability currently shows minimal exploitation activity with an EPSS score of 0.00028, indicating it is not yet actively exploited in the wild. While not yet on the Known Exploited Vulnerabilities catalog or community hot lists, organizations should prioritize patching given the critical severity rating and network-accessible attack vector.