CVE-2026-32956Disclosure(silextechnology / amc_manager)

MEDIUMCVSS 9.3 · CRITICAL

Exploitation observed; activity peaked at 3 mentions and remains active

Immediate actions

Prioritize remediation for silextechnology amc_manager systems immediately
Assume compromise if assets are exposed
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in processing the redirect URLs. Arbitrary code may be executed on the device.

silextechnology CVEs Back to dashboard

5.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-122

Priority

MEDIUM

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

amc_manager
sd-330ac
sd-330ac_firmware

Threat summary

Active exploitation appears in 1 classified signals
Public PoC is present in monitored signal
4 mentions across 2 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
PoC mentioned or linked in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
Peaked 1d ago at 3 mentions (2026-04-20); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

silextechnology

Products

amc_managersd-330acsd-330ac_firmware

1 version affected across 3 products

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

375.0%

Active Exploitation

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-20	3	Disclosure3
2026-04-21	1	Active Exploitation1

Full discourse4 posts

Aviatrix Threat Research Center@aviatrixtrc170d
Active Exploitation
Attackers exploited heap-based buffer overflow (CVE-2026-32956) in Silex serial-to-IP converters to gain device access, then used hard-coded keys for firmware updates and lateral network movement. Runtime segmentation helps contain post-compromise pivoting in OT environments. #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/serial-ip-devices-vulnerabilities-2026
Post summary
Attackers are actively exploiting CVE‑2026‑32956, a heap‑based buffer overflow in Silex serial‑to‑IP converters, to gain device access and perform lateral movement.
2001099
1.9K followersView on X
CVE@CVEnew171d
Disclosure
CVE-2026-32956 SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in processing the redirect URLs. Arbitrary code may be … https://www.cve.org/CVERecord?id=CVE-2026-32956
Post summary
The brief statement announces a heap‑based buffer overflow vulnerability in SD‑330AC and AMC Manager, providing the core technical detail but no PoC, exploit, patch, or exploitation evidence.
00000123
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds172d
Disclosure
CVE-2026-32956 Heap-Based Buffer Overflow in Silex Technology SD-330AC and AMC Manager https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32956
Post summary
A new heap-based buffer overflow vulnerability (CVE-2026-32956) affecting Silex Technology SD-330AC and AMC Manager has been disclosed on Vulmon, with a link to detailed information.
0000056
4.0K followersView on X
0day Signal@0dayPublishing172d
Disclosure
🚨 CVE-2026-32956: silex technology, Inc. (CVSS: 9.... Heap overflow in redirect URL parsing = instant RCE on network-accessible industrial WiFi devices - perfect pivot point... https://zerodaysignal.com/vulnerability/CVE-2026-32956 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
A new high‑severity CVE‑2026‑32956 was disclosed, describing a heap overflow that enables instant remote code execution on network‑accessible industrial WiFi devices, with a link to more details.
0000081
218 followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	silextechnology	amc_manager	-	-	-
HW	silextechnology	sd-330ac	-	-	-
OS	silextechnology	sd-330ac_firmware	-	-	-

Explore more

Back to dashboard silextechnology CVEs amc_manager vulnerabilities

What researchers are saying

CVE-2026-32956

Aviatrix Threat Research Center[verified]@aviatrixtrcActive Exploitation

Attackers are actively exploiting CVE‑2026‑32956, a heap‑based buffer overflow in Silex serial‑to‑IP converters, to gain device access and perform lateral movement.

CVE@CVEnewDisclosure

The brief statement announces a heap‑based buffer overflow vulnerability in SD‑330AC and AMC Manager, providing the core technical detail but no PoC, exploit, patch, or exploitation evidence.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A new heap-based buffer overflow vulnerability (CVE-2026-32956) affecting Silex Technology SD-330AC and AMC Manager has been disclosed on Vulmon, with a link to detailed information.

0day Signal@0dayPublishingDisclosure

A new high‑severity CVE‑2026‑32956 was disclosed, describing a heap overflow that enables instant remote code execution on network‑accessible industrial WiFi devices, with a link to more details.