Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted element is the function TSnap7Peer::NegotiatePDULength of the file src/core/s7_peer.cpp. The manipulation of the argument PDULength results in out-of-bounds write. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-16225 Out-of-Bounds Write in davenardella snap7 Up to 1.4.3 (Exploitation Reported) https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-16225
Post summary
The post reports active exploitation of CVE-2026-16225, an out-of-bounds write vulnerability in davenardella snap7 up to version 1.4.3, but does not provide PoC, exploit code, patch, or debunking information.