AUGUST 14, 2026
Live Feed
Back to database
Case File

CVE-2026-18503

LOW · CVSS 2.4 EPSS 0.12% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-14

CyberRota Analysis

AI-Generated

Applications that utilize the csv.Sniffer.sniff() function are vulnerable to performance degradation due to super-linear regular-expression processing when handling attacker-controlled CSV samples. This can lead to significant CPU consumption, potentially impacting the application's availability. Developers and system administrators should prioritize this issue to mitigate potential denial-of-service scenarios in their applications.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-18503
Severity
LOW
CVSS
2.4
EPSS
0.12%

Original NVD Description

Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff().