High severity · published Aug 27, 2026
CVE-2026-81575
Missing Sanity Checks for Buffer Lengths
7.5
CVSS
0.5%
EPSS
No
On KEV
Description
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and
the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a
segmentation fault that ultimately crashes the CodeMeter Runtime.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
codemeter-runtime · wibu-systems-ag
9.00 before 9.10; 8.00 before 8.41a · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-81575
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-81575
cdn.wibu.com
https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-103401.pdf
More from codemeter-runtime
8.6
CVE-2026-81573
Improper Access Control in Local-Only Configuration Commands
8.2
CVE-2026-81574
Format String Vulnerability in Logger
7.8
CVE-2026-81572
Local Privilege Escalation in CodeMeter Runtime on Windows
7.7
CVE-2026-81576
Improper Authentication of Session Handles