PatchSiren

3proxy CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM 3proxy CVE published 2026-10-14

CVE-2026-109438

A vulnerability in 3proxy versions 0.9.7 through 1.0.1 allows unauthenticated attackers to leak stack bytes via the SOCKS4 reply path. This issue is fixed in commit 206c923. The vulnerability can potentially weaken ASLR protections and lead to information disclosure. Defenders should assess exposure and apply the patch commit (206c923) to mitigate the vulnerability. The vulnerability is triggered when the [truncated]