CVE-2026-56766: Thc Hydra Ntlm Sprintf Overflowcve-2026-56766-thc-hydra-ntlm-sprintf-overflow
A base64-encoded NTLM Type-3 response encapsulating untrusted server challenge data is formatted into a buffer via `sprintf` without prior length validation. An attacker controlling the NTLM Type-2 domain can cause this write to overflow a fixed-size stack buffer, resulting in remote code execution.
