{"schema":"threatline.record/2","record":{"id":"CVE-2026-82946","aliases":[],"summary":"Null Pointer Dereference in Mailbox Error Handling","details":"SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system. When the software receives an error response, it clears an internal pointer but continues processing. If another message arrives before timeout, the software attempts to use the cleared pointer, causing a crash. An attacker can trigger this with a simple sequence of two messages.","categories":["Unclassified"],"product":"SOEM","vendor":"RT-Labs AB","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-82946","source_modified_at":"2026-10-26T08:55:20.654Z","fetched_at":"2026-10-26T12:48:13.248886Z","product":"SOEM","vendor":"RT-Labs AB","versions":[{"status":"affected","version":"0","lessThan":"2.0.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-82946","source_modified_at":"2026-10-26T08:55:20.654Z","fetched_at":"2026-10-26T12:48:13.248886Z","package":{"name":"SOEM","ecosystem":null},"version":"2.0.1","basis":"first unaffected version stated in the CVE record"}],"cvss":6.5,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-26T08:55:20.654Z","modified_at":"2026-10-26T08:55:20.654Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-82946","fetched_at":"2026-10-26T12:48:13.248886Z","source_modified_at":"2026-10-26T08:55:20.654Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://rt-labs.com/wp-content/uploads/2026/10/RRTL-260921-01.pdf","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-26T08:55:20.654Z","content_hash":"10dfb078127e8c06b0b1357f79151e3b469a80e05eac1e588feffd6e1272622a"}}