PT-2026-25081 · Undefined · Undefined

Published 2026-03-12 · Updated 2026-03-14 · CVE-2026-25823

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HMS Networks Ewon Flexy versions prior to 15.0s4 HMS Networks Cosy+ versions 22.xx prior to 22.1s6 HMS Networks Cosy+ versions 23.xx prior to 23.0s3

Description HMS Networks Ewon Flexy and Cosy+ devices are affected by a stack buffer overflow. This issue can lead to a Denial of Service and may also allow for Unauthenticated Remote Code Execution.

Recommendations Update HMS Networks Ewon Flexy to version 15.0s4 or later. Update HMS Networks Cosy+ to version 22.1s6 or later. Update HMS Networks Cosy+ to version 23.0s3 or later.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2026-25823

Affected Products

Undefined

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-25823 · Security Note
• https://twitter.com/infoflowcloud/status/2032411815334785169 · Twitter Post
• https://twitter.com/CVEnew/status/2032410984984588786 · Twitter Post
• https://twitter.com/CveFindCom/status/2032550599535853914 · Twitter Post
• https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2026-03-09-001---ewon-several-flexy-and-cosy--vulnerabilities.pdf?sfvrsn=f7c027b8_13 · Note
• https://hms-networks.com/p/flexy20500-00ma-ewon-flexy-205 · Note
• https://twitter.com/TheHackerWire/status/2032864464534646994 · Twitter Post