Known Vulnerabilities for Tftp-hpa by H. Peter Anvin
Listed below are 10 of the newest known vulnerabilities associated with "Tftp-hpa" by "H. Peter Anvin".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-124737 json | A flaw was found in BusyBox. When the TFTP (Trivial File Transfer Protocol) client requests a custom small block size and rec... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-120189 json | A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the fil... | Not Provided | 2026-11-01 | 2026-11-05 |
| CVE-2026-106026 json | tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewrite_string() in tftpd/remap.c that walks heap mem... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-102721 json | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the TFTP client copies the message of a received ERROR packet... | Not Provided | 2026-09-29 | 2026-11-04 |
| CVE-2026-102713 json | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, built with packet chaining, the TFTP server does not b... | Not Provided | 2026-09-29 | 2026-11-04 |
| CVE-2026-95508 json | A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with... | Not Provided | 2026-09-22 | 2026-11-06 |
| CVE-2026-93006 json | A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not ... | Not Provided | 2026-10-29 | 2026-11-06 |
| CVE-2026-92389 json | libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening ... | Not Provided | 2026-10-20 | 2026-10-30 |
| CVE-2026-89020 json | MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the m... | Not Provided | 2026-09-14 | 2026-11-06 |
| CVE-2026-85234 json | A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-em... | Not Provided | 2026-09-15 | 2026-11-11 |