CVE-2026-9718
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A CWE-617 Reachable Assertion vulnerability allows an authenticated attacker to trigger a denial-of-service (DoS) condition by sending a specially crafted request to a vulnerable network-exposed service. This impacts system availability.
Risk Assessment
The risk involves potential disruption of critical network services by an authenticated attacker, leading to system unavailability and affecting business continuity.
Recommendation
Immediately update the affected component to the latest patched version. If unavailable, restrict access to the vulnerable service to trusted IP addresses and implement monitoring for anomalous requests.
Other vulnerabilities in UnknownComponent
See all- CVE-2026-22098Critical
The vulnerability causes sensitive information such as passwords and charging card UIDs to be written to log files. This can lead to unauthorized access to this data by individuals with log access.
- CVE-2026-9645Critical
The vulnerability allows authenticated users to create and execute arbitrary JavaScript code on the server. Scripts run with full privileges, enabling complete system compromise as commands are executed as root.
- CVE-2026-57239High
The vulnerability allows low-privilege users to execute arbitrary executable files with NT AUTHORITY\SYSTEM privileges, enabling privilege escalation.
- CVE-2026-48951Medium
Lack of output escaping in modalreturn layouts of various components leads to Cross-Site Scripting (XSS) vulnerabilities.
- CVE-2026-21384Medium
Memory corruption occurs when updating prepared commands with invalid port indices from user space input that exceed supported read client limits.
- CVE-2026-21379High
The vulnerability causes memory corruption when allocating memory with sizes exceeding the maximum allowed value. This can lead to unpredictable application behavior.
- CVE-2026-21370Medium
The vulnerability causes memory corruption when validating input batch size and buffer plane count that exceed maximum allowed values.
- CVE-2026-35505High
An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows until the service is killed and the port stops responding until restart.
Original NVD description (English source)
CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-service condition, impacting system availability when a specially crafted request is sent to a vulnerable network-exposed service.