CVE-2020-37138: 10-Strike Software Network Inventory Explorer

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

10-Strike Network Inventory Explorer 9.03 contains a buffer overflow vulnerability in the file import functionality that allows remote attackers to execute arbitrary code. Attackers can craft a malicious text file with carefully constructed payload to trigger a stack-based buffer overflow and bypass data execution prevention through a ROP chain.

Affected products

• 10-Strike Software Network Inventory Explorer: version 9.03 only

Published 2026-02-05. Last modified 2026-06-17.