Dashboard / CVE-2026-120226

CVE-2026-120226

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 35/100
Published: 2026-11-01 Modified: 2026-11-06 First seen: 2026-11-01 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
AT: None
VC: None
VI: None
VA: Low

Description

A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by this issue is the function P2PAPI_Connect of the component P2P SDK. Such manipulation of the argument input as part of String leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness Classification (2)

Affected Software (2)

VendorProductVersion
Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32
Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32

References & Advisories (5)

https://vuldb.com/vuln/429585
vdb-entry technical-description mitigation
https://vuldb.com/submit/1013929
third-party-advisory
https://vuldb.com/vuln/429585/cti
signature permissions-required

Bug Bounty Relevance

35 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

4.8 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

EPSS — Exploitation Probability

0.12%
Raw Score 0.001240
Percentile 2.2%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00124
2026-11-12
0.00124
2026-11-10
0.00124
2026-11-09
0.00124
2026-11-08
0.00124
2026-11-07
0.00124
2026-11-06
0.00124
2026-11-05
0.00124
2026-11-04
0.00124
2026-11-03
0.00124
2026-11-02
0.00124

Intelligence Sources

mitre ref →
nvd ref →

External Links