GALAYOU Y4 Web Server buffer overflow

published 2026-06-14 4mo ago modified 2026-07-24 3mo ago also EUVD-2026-36671

cvss: 8.8; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 24%
public exploits: 0; none known

A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted is an unknown function of the component Web Server. This manipulation causes buffer overflow. The attack is only possible within the local network. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Is CVE-2026-12192 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 4mo ago (2026-06-15)

Exploit prediction

0.32% chance of exploitation in the next 30 days, higher than 24% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
CNA	4.0	8.7	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
CNA	3.1	8.8	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
CNA	3.0	8.8	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
CNA	2.0	8.3	AV:A/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR
CNA	4.0	7.4	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CNA	3.1	8.8	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA	2.0	8.3	AV:A/AC:L/Au:N/C:C/I:C/A:C

Affected products

GALAYOU Y4

Classification

Weakness

CWE-120 Buffer Copy without Checking Size of Input
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

vuldb.com /vuln/370838
vdb-entry
vuldb.com /vuln/370838/cti
signature, permissions-required
vuldb.com /cve/CVE-2026-12192
third-party-advisory
vuldb.com /submit/825801
third-party-advisory

Sources

CVE List CVE-2026-12192
NVD CVE-2026-12192

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.