Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #10

Critical vulnerability disclosed in G4KLX DStarGateway software

Original: 🚨 EUVD-2026-117270 📊 Score: 9.2/10 (CVSS v3.1) 📦 Product: DStarGateway 🏢 Vendor: G4KLX 📅 Updated: 2026-11-05 📝 In G4KLX

A high-severity vulnerability, tracked as EUVD-2026-117270 and scored 9.2 out of 10 under CVSS v3.1, has been disclosed in G4KLX DStarGateway and F4FXL DStarGateway before commit 7b75de6. The flaw sits in the dstarCallsignToAPRS function in APRSUtils.cpp, where an empty RS-MS1A sender field triggers an integer underflow. Updated records were published on November 5, 2026, and users of the amateur radio gateway software are advised to check for patched builds.

Why now: The newly published high CVSS score for software widely used in D-Star amateur radio gateways is prompting system operators to check whether their installs are affected.

G4KLXDStarGatewayF4FXLEUVD-2026-117270

Open on mastodon →

Evidence

• 🚨 EUVD-2026-117270 📊 Score: 9.2/10 (CVSS v3.1) 📦 Product: DStarGateway 🏢 Vendor: G4KLX 📅 Updated: 2026-11-05 📝 In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field. 🔗… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4952201