CVE catalog

CVE-2026-32956

SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in processing the redirect URLs. Arbitrary code may be executed on the device.

[CVE catalog]

Severity: Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: Apr 20, 2026, 4:16:34 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.52% · Oct 25, 2026

SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in processing the redirect URLs. Arbitrary code may be executed on the device.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Cpe	sd-330ac_firmware	Not reported	`1.50`	fixed
Cpe	amc_manager	Not reported	`5.1.0`	fixed
Cpe	sd-330ac_firmware	Not reported	`1.50`	fixed
Cpe	amc_manager	Not reported	`5.1.0`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Cpe	sd-330ac_firmware	cpe	Not reported	`1.50`	Not reported	Not reported	Not reported
Cpe	amc_manager	cpe	Not reported	`5.1.0`	Not reported	Not reported	Not reported
Cpe	sd-330ac_firmware	cpe	Not reported	`1.50`	Not reported	NVD-CVE-2026-32956	Not reported
Cpe	amc_manager	cpe	Not reported	`5.1.0`	Not reported	NVD-CVE-2026-32956	Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed: Oct 26, 2026, 2:51:18 AM UTC

References

[CISA cybersecurity advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]