HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-56766 — Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in ...

·Source: NIST NVD

Updated:

Executive Summary

Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a crafted NTLM Type-2 challenge with an excessively long domain string, causing base64-encoded response data to overflow a 500-byte stack buff

Analysis

Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a crafted NTLM Type-2 challenge with an excessively long domain string, causing base64-encoded response data to overflow a 500-byte stack buffer by 18 to 330 bytes, enabling remote code execution on systems without stack protection. CVSS Score: 8.8. Published: 2026-06-25T19:16:43.577.

Indicators of Compromise (1)

CVE (1)
CVE-2026-56766
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jun 25, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Robinhood unveils UK crypto launch plans and global DeFi expansion

Today, live from the historic Old Royal Naval College in London, Robinhood hosted Robinhood Presents: The World is Flat, a landmark keynote revealing our most ambitious global expansion and product vision to date.

Finextra
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-58457 — Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenti...

Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilter_conf handler in the commuos web backend. Attackers can append semicolon-delimited payloads to the name, enable, or mac GET parameters, which are passe

CVE-2026-58457
NIST NVD
MEDIUMVulnerabilityNEW

Teen suspect in Scattered Spider hacks is extradited to US

A complaint unsealed this week accuses a 19-year-old of participating in incidents including a breach of a "luxury-jewelry retailer" in 2025.

The Record