Espressif arduino-esp32

• CVE-2026-42854 Critical 9.8 arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE 0.6%
• CVE-2026-42855 High 7.5 arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack 0.4%
• CVE-2026-41429 High 8.8 Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption 0.3%
• CVE-2025-53540 High 8.7 CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Execution 0.3%
• CVE-2025-53007 High 8.9 arduino-esp32 vulnerable to CRLF injection in WebServer.cpp 0.5%
• CVE-2024-45798 Critical 10.0 Multiple Poisoned Pipeline Execution (PPE) vulnerabilities 0.9%