CVE-2026-70388 Memory Corruption via Integer Underflow in Message Length Validation
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-70388?
CVE-2026-70388 is a high-severity vulnerability in RT-Labs AB SOEM, published on 26 Oct 2026.
Official description
SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowing negative or extremely large values to bypass safety checks. This can corrupt memory and potentially allow an attacker to execute arbitrary code on the master system.
Which versions are affected by CVE-2026-70388?
How do I fix CVE-2026-70388?
No fix has been published for CVE-2026-70388 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-70388 being exploited?
There is no known exploitation of CVE-2026-70388 in the wild and no public exploit code.
Sources
Also known as GHSA-3w9x-57hf-mwj3.