Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Xcitium Client Security (XCS) before 13.8.2.10019 and Comodo Internet Security (CIS) through 12.3.4.8162 (fix expected by 2026 Q3) contain an integer underflow vulnerability in the firewall driver Inspect.sys that allows remote unauthenticated attackers to crash the system by sending a crafted IPv6 packet with a declared payload length smaller than the sum of its extension-header lengths. The unsigned 64-bit payload-length value underflows to a near-maximal integer, triggering an out-of-bounds read and oversized memcpy in the Windows kernel at DISPATCH_LEVEL, resulting in a blue screen of death even on hosts with all ports blocked.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-07 | 3 | Disclosure1General2 |
| 2026-06-08 | 1 | Disclosure1 |
| 2026-07-02 | 1 | Disclosure1 |
Comodo's firewall driver just shipped a textbook integer underflow in its IPv6 parser (CVE-2026-49494). If you write packet filters, this one's for you.
Post summary
Comodo's firewall driver has a newly disclosed integer underflow in its IPv6 parser (CVE-2026-49494); no PoC, exploit, patch, or active exploitation is mentioned.
CVE-2026-49494: Comodo Internet Security Firewall Driver Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04npgXC0
Post summary
This is a general advisory describing a driver bug in Comodo Internet Security Firewall, with no PoC, exploit, or active exploitation details disclosed.
CVE-2026-49494 (CVSS 8.7) impacts Comodo Internet Security firewall driver Inspect.sys IPv6 handling. Assess exposure if deployed: https://nvd.nist.gov/vuln/detail/CVE-2026-49494 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/QGHxHQmUjv
Post summary
The tweet links to the NVD entry for CVE‑2026‑49494, noting its high CVSS score and impact on the Comodo firewall driver, but offers no PoC, exploit, or patch details.
CVE-2026-49494 Integer Underflow in Comodo Internet Security Firewall Driver http://Inspect.sy... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-49494 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The tweet announces CVE‑2026‑49494, an integer underflow vulnerability in Comodo Internet Security Firewall Driver, referencing the vulnerability details but without any exploit, patch or active use information.
There is a new vulnerability with elevated criticality in Comodo Internet Security (CVE-2026-49494) https://vuldb.com/vuln/369116
Post summary
The text simply announces a new critical vulnerability in Comodo Internet Security (CVE-2026-49494) but provides no further details or evidence of exploitation, mitigations, or technical specifics.