CVE catalog

CVE-2026-42799

Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This issue affects K

[CVE catalog]

Severity
High · CVSS 7.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.28% · Oct 25, 2026

Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This issue affects Kestrel: before 2026/02/10.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Cpeasr1803_firmwareNot reported1.216.002fixed
Cpeasr1803_firmwareNot reported1.216.002fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Cpeasr1803_firmwarecpeNot reported1.216.002Not reportedNot reportedNot reported
Cpeasr1803_firmwarecpeNot reported1.216.002Not reportedNVD-CVE-2026-42799Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References