Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-49435— Keysight IxChariot-related products stack-based buffer overflow

Quick assessment

Affected

Keysight Hawkeye

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Keysight hawkeye是美国Keysight公司的一款网络性能监控工具。 Keysight hawkeye 6.0.7之前版本、Keysight IxChariot 10.0.254之前版本、Keysight IxTap 3.13.0之前版本、Keysight IxProbe 3.13.0之前版本和Keysight IxByPass 3.13.0.69之前版本存在缓冲区错误漏洞，该漏洞源于栈缓冲区溢出，可能导致未经身份验证的远程攻击者发送特制数据包并以管理权限执行任意代码。

CVSS 9.8 · Critical EPSS 1.42% · P73 Updated Aug 05, 2026

Possible ATT&CK Techniques 2 AI

T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application

Affected Version Matrix 10

Vendor	Product	Version Range	Status
Keysight	Hawkeye	`< 6.0.7`	affected
		`6.0.7`	unaffected
Keysight	IxByPass	`< 3.13.0.69`	affected
		`3.13.0.69`	unaffected
Keysight	IxChariot	`10.0.254`	unaffected
		`< 10.0.254`	affected
Keysight	IxProbe	`< 3.13.0`	affected
		`3.13.0`	unaffected
Keysight	IxTap	`< 3.13.0`	affected
		`3.13.0`	unaffected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-49435

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Keysight IxChariot-related products stack-based buffer overflow

Source: CVE Program / CVE List V5

Vulnerability Description

Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet and execute arbitrary code with administrative privileges.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

栈缓冲区溢出

Source: CVE Program / CVE List V5

Vulnerability Title

Keysight hawkeye 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
Keysight	Hawkeye	0 ~ 6.0.7	-
Keysight	IxChariot	10.0.254	-
Keysight	IxTap	0 ~ 3.13.0	-
Keysight	IxProbe	0 ~ 3.13.0	-
Keysight	IxByPass	0 ~ 3.13.0.69	-

II. Public POCs for CVE-2026-49435

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-49435

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-49435 (1)

🔗 https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-216-01.json third-party-advisory

Other References for CVE-2026-49435 (1)

🔗 CVE Record: CVE-2026-49435 vdb-entry

https://www.cve.org/CVERecord?id=CVE-2026-49435

Same Patch Batch · Keysight · 2026-08-04 · 3 CVEs total

CVE-2017-20242	9.8 CRITICAL	Keysight IxChariot Endpoint stack-based buffer overflow
CVE-2017-20241	9.8 CRITICAL	Keysight IxChariot Endpoint heap-based buffer overflow

IV. Related Vulnerabilities

Same vendor: Keysight

Same weakness: CWE-121