CVE-2026-55977
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Successful exploitation of this vulnerability allows an attacker with local network access to bypass the application's rate-limiting mechanism, enabling brute-forcing of the screen-sharing code and potentially displaying harmful content on the affected screen.
Risk Assessment
Attackers can display unauthorized or harmful content on the victim's screen, potentially leading to data theft, phishing, or other attacks.
Recommendation
Immediately update the application to the latest version that strengthens the rate-limiting mechanism.
Other vulnerabilities in Application
See all- CVE-2026-64880High
The application contains an SQL injection vulnerability in report filtering parameters. Unsanitized user input is concatenated directly into SQL queries, enabling blind SQL injection and unauthorized database read access.
- CVE-2026-49033High
The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code.
- CVE-2026-42958High
The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing specially crafted files. This could allow an attacker to execute arbitrary code in the context of the current process.
- CVE-2026-42953High
The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution.
Original NVD description (English source)
Successful exploitation of this vulnerability could allow an attacker with local network access to bypass the application's rate-limiting mechanism, enabling brute-forcing of the screen-sharing code and potentially displaying harmful content on the affected screen.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS