Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos Era 300. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the DataOffset field within SMB responses. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the kernel. Was ZDI-CAN-28345.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-16 | 1 | Disclosure1 |
| 2026-03-18 | 1 | General1 |
| 2026-04-11 | 3 | Disclosure3 |
[ZDI-26-192|CVE-2026-4149] Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability (CVSS 10.0; Credit: dmdung (@_piers2) of STAR Labs SG Pte. Ltd) https://www.zerodayinitiative.com/advisories/ZDI-26-192/
Post summary
The advisory announces CVE‑2026‑4149, a SMB response OOB access and RCE vulnerability in Sonos Era 300, providing a CVSS score and credit but no patch or exploit details.
🔍 Today's Top Vulnerabilities 🔴 CVE-2026-40175 | CVSS 10.0 🔴 CVE-2026-4149 | CVSS 10.0 🔴 CVE-2026-5412 | CVSS 9.9 🔗 http://ctiwatch.cloud/vulnerabilities #CVE #Vulnerability #ThreatIntel
Post summary
The post enumerates three newly identified high‑severity CVEs with their CVSS scores and provides a link to a website, but offers no PoC, exploit code, or patch information.
Top 5 Trending CVEs: 1 - CVE-2026-3342 2 - CVE-2026-4149 3 - CVE-2026-32635 4 - CVE-2025-41237 5 - CVE-2019-17571 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The post simply enumerates trending CVE identifiers without offering any technical, exploit, or mitigation information.
[CVE-2026-4149: CRITICAL] Critical remote code execution vulnerability (ZDI-CAN-28345) discovered in Sonos Era 300. Attackers can exploit SMB responses to execute arbitrary code without authentication.#cve,CVE-2026-4149,#cybersecurity https://cvefind.com/CVE-2026-4149
Post summary
The tweet announces a critical remote code execution vulnerability (CVE‑2026‑4149) in Sonos Era 300, detailing how attackers can exploit SMB responses without authentication.
🚨 CVE-2026-4149: Sonos Era 300 SMB Response Out-Of... Kernel-level RCE on premium speakers via malformed SMB DataOffset - no auth needed, perfect CVSS 10.0 makes every Era 30... https://zerodaysignal.com/vulnerability/CVE-2026-4149 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet announces a newly disclosed Sonos Era 300 vulnerability (CVE‑2026‑4149) that permits unauthenticated kernel‑level remote code execution via a malformed SMB DataOffset, rated with a perfect CVSS 10.0 score.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | sonos | era_300 | - | - | - |
| OS | sonos | era_300_firmware | - | - | - |