CVE-2016-9176: Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could...

Security readout for executives and security teams

CVE-2016-9176 is a stack buffer overflow in Micro Focus Rumba send.exe and receive.exe. An attacker with local access, or a way to control arguments passed to these programs, could execute code. The sources do not provide CVSS, vendor fix details, or evidence of active exploitation. Exposure is likely limited to environments still running Micro Focus Rumba 9.4 or earlier. Risk is higher where send.exe or receive.exe are invoked by scripts, wrappers, scheduled tasks, or user-accessible workflows that may accept untrusted input. Treat this as a legacy application risk requiring targeted remediation, not an internet-wide emergency. Prioritize systems where Rumba is still business-critical and reachable by multiple users or automation paths. Mitigation focus: Inventory endpoints and servers for Micro Focus Rumba 9.4 or earlier.; Check Micro Focus or OpenText guidance for supported upgrades or fixes.; Restrict local access to systems running affected Rumba components..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.