Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packe…

A critical stack-based buffer overflow vulnerability has been identified in Keysight IxChariot Endpoint and associated products. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted packet to the affected system. Successful exploitation allows arbitrary code execution with administrative privileges, posing a severe security risk. The vulnerability affects multiple Keysight products including IxChariot, HawkEye, IxProbe, and IxTP Copper Taps. No authentication is required to exploit this vulnerability, making it particularly dangerous in network-exposed environments. The issue has been assigned CVE-2026-49435 and is rated high criticality. Keysight has published a security advisory with guidance for affected users. CISA has also published a CSAF advisory regarding this vulnerability.