CVE-2026-41079 — Out-of-Bounds $1

title: Out-of-Bounds Read via Crafted SNMP Response - CVE-2026-41079
id: scw-2026-04-24-ai-1
status: experimental
level: medium
description: |
  Detects potential exploitation of CVE-2026-41079 by looking for IPP Get-Printer-Attributes responses that include 'supply' in the query parameters, indicating an attempt to retrieve printer supply descriptions which could contain leaked memory from an out-of-bounds read. This targets the information disclosure aspect of the vulnerability.
author: SCW Feed Engine (AI-generated)
date: 2026-04-24
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-41079/
tags:
  - attack.initial_access
  - attack.t1190
logsource:
    category: webserver
detection:
  selection:
      cs-uri|contains:
          - '/printers/'
      cs-uri-query|contains:
          - 'supply'
      sc-status:
          - 200
  condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse