CVE-2026-0993 SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary Parser
Unauthenticated remote attackers can cause denial of service on SODOLA SL902-SWTGW124AS devices by sending oversized multipart boundary values.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-0993?
CVE-2026-0993 is a high-severity memory corruption vulnerability in SODOLA SL902-SWTGW124AS, published on 15 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP server's multipart/form-data boundary parser to cause the device to become fully unresponsive — dropping all management access and traffic forwarding during its self-recovery cycle.
Weakness: CWE-120
Which versions are affected by CVE-2026-0993?
How do I fix CVE-2026-0993?
No fix has been published for CVE-2026-0993 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-0993 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-0993 exists.
Sources
Also known as GHSA-mqpm-mf8q-5w3f.