CVE-2026-65832

What it is

Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions (DSOP) values to ServerProxy::setOptions() in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons m_modifierTranslationTable, after which ServerProxy::translateKey() or ServerProxy::translateModifierMask() indexes the seven-row s_translationTable or s_masks arrays out of bounds, disclosing four bytes at an attacker-selected relative offset or crashing the connected client; an odd option count also causes an out-of-bounds OptionsList read. This issue is fixed in continuous build 1.26.0.299.

At a glance

Exploitability

Can be exploited over the network without logging in. High risk of service disruption.

Exploit odds

0.6% chance of exploitation in the next 30 days (EPSS).

Fix

A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

1. 2026-08-17 21:16 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-10-23 16:10 UTC Last updatedMost recent change to the record

Details

Published

2026-08-17 21:16 UTC

Last modified

2026-10-23 16:10 UTC

Exploit probability

0.6% · EPSS, next 30 days

Weakness

CWE-125 · Out-of-bounds read

Record status

Deferred

Attack profile CVSS 3.1 · 8.2

Attack vector

Network

Complexity

Low

Privileges needed

None

User interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High