CVE-2026-76646
HighCVSS 7.5Summary
A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected.
Risk Assessment
A successful attack may render the service unavailable to legitimate users and disrupt system operations. The risk is significant for services exposed to traffic from untrusted networks.
Recommendation
Upgrade the software to one of the fixed versions: 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, or 4.1.4. If that is not possible, limit service exposure and monitor for unusual resource consumption.
Other vulnerabilities in Nieokreślony
See all- CVE-2026-68491Critical
An insufficient check allowed for the overwrite of arbitrary files via a symlink. Technical details were not provided in the description.
- CVE-2026-66890Critical
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable. Technical details were not provided in the description.
- CVE-2026-66887Critical
The affected products are missing authorization on state-changing CGIs and session checks are not performed. Technical details were not provided in the description.
Original NVD description (English source)
A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, or 4.1.4, which fix this issue.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS