OCTOBER 10, 2026
Live Feed
Back to database
Case File

CVE-2026-42801

HIGH · CVSS 7.4 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-09-23 · Last synced 2026-10-10

CyberRota Analysis

AI-Generated

A NULL pointer dereference vulnerability in the ASR Crane and Falcon products on Linux, specifically within the as_rrc module, allows for pointer manipulation, potentially leading to application crashes or arbitrary code execution. Organizations utilizing these products should prioritize patching this vulnerability to mitigate the risk of exploitation, particularly those in environments where stability and security are critical.

CVE
CVE-2026-42801
Severity
HIGH
CVSS
7.4
EPSS
0.21%
Linux

Original NVD Description

NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.