Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-82946— Null Pointer Dereference in Mailbox Error Handling

Quick assessment

Affected

RT-Labs AB SOEM

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SOEM 2.0.0 及更早版本存在一个漏洞，恶意设备可利用该漏洞导致主系统崩溃。当软件收到错误响应时，会清除内部指针但仍继续处理；若在超时前又有新消息到达，软件将尝试使用已被清除的指针，从而引发崩溃。攻击者仅需发送两条消息的简单序列即可触发此漏洞。

CVSS 6.5 · Medium Updated Oct 26, 2026

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Null Pointer Dereference in Mailbox Error Handling

Source: CVE Program / CVE List V5

Vulnerability Description

SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system. When the software receives an error response, it clears an internal pointer but continues processing. If another message arrives before timeout, the software attempts to use the cleared pointer, causing a crash. An attacker can trigger this with a simple sequence of two messages.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

空指针解引用

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
RT-Labs AB	SOEM	0 ~ 2.0.1	-

II. Public POCs for CVE-2026-82946

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-82946

请登录查看更多情报信息。

Other References for CVE-2026-82946 (1)

https://rt-labs.com/wp-content/uploads/2026/10/RRTL-260921-01.pdf vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-82946

Same Patch Batch · RT-Labs AB · 2026-10-26 · 6 CVEs total

CVE-2026-82944	8.8 HIGH	Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers
CVE-2026-70388	8.3 HIGH	Memory Corruption via Integer Underflow in Message Length Validation
CVE-2026-82947	7.1 HIGH	Multiple Out-of-Bounds Reads in Frame Processing
CVE-2026-82945	6.5 MEDIUM	Memory Corruption via FMMU Configuration Table Overflow
CVE-2026-82943	6.5 MEDIUM	Out-of-Bounds Read via Unchecked Length Values

IV. Related Vulnerabilities

Same product: SOEM

Same vendor: RT-Labs AB

Same weakness: CWE-476