CVE-2026-11796

MediumCVSS 5.1

Published: 29/09/2026(UTC)Updated: 29/09/2026(UTC)Translated: 29/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet, and ResourceBundleReloadServlet, which could result in denial-of-service conditions affecting application availability.

Risk Assessment

An unauthenticated attacker could cause Asset Suite application unavailability, disrupting user work. This poses a risk to business service continuity.

Recommendation

Restrict access to the listed servlets to authenticated and authorized users only, and verify Asset Suite configuration according to vendor guidance.

Other vulnerabilities in Asset Suite

CVE-2026-7395High
Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet, which can be used for configuration file upload, leading to information disclosure and integrity compromise. The servlet is intended for testing in non-production environments.

Original NVD description (English source)

Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet and ResourceBundleReloadServlet, which could result in denial-of-service conditions affecting application availability. These servlets are designed to perform specific functions within production environment depending on how the Asset Suite application is configured.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS