CVE-2026-71265 Details

A buffer overflow vulnerability has been identified in Domoticz within the MochadTCP handler for MOCHAD_RFSEC messages. The issue arises in the hardware/MochadTCP.cpp file, where data is copied from a network-received buffer of up to 1028 bytes into a fixed 50-byte stack buffer. This is done using strcpy() without any length validation, across three different code branches corresponding to DS10A, KR10A, and MS10A device types. An attacker on the same local network segment, with access to the Mochad TCP bridge (default port 1099, no authentication), can send a crafted packet that overflows the stack buffer by several hundred bytes, leading to corruption of the Domoticz worker thread's stack.