CVE-2026-36501

HighCVSS 7.5

Published: 05/06/2026(UTC)Updated: 09/06/2026(UTC)Translated: 10/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.02%

5th percentile - higher than 5% of all known CVEs

Summary

An issue in the Externalizable.readExternal() component of Controller v12.0.5 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Risk Assessment

A DoS attack can lead to service unavailability, impacting business continuity and potentially resulting in financial losses.

Recommendation

It is recommended to update to the latest version of Controller to mitigate this vulnerability and to monitor the system for unusual activities.

Original NVD description (English source)

An issue in the Externalizable.readExternal() component of Controller v12.0.5 allows attackers to cause a Denial of Service (DoS) via a crafted input.