CyberSecBulletin

Grunfink vulnerabilities

We track 1 vulnerability in Grunfink products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 18, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Grunfink vulnerabilities

  • 7.5 High severity

    snac2: Heap-based Buffer Overflow

    CVE-2026-112021Grunfink

    snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted applicati