CVE-2025-34108 – Disk Pulse Enterprise Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-34108

Published : July 15, 2025, 1:15 p.m. | 1 hour, 17 minutes ago

Description : A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse Enterprise version 9.0.34. An attacker can send a specially crafted HTTP POST request to the /login endpoint with an overly long username parameter, causing a buffer overflow in the libspp.dll component. Successful exploitation allows arbitrary code execution with SYSTEM privileges.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…