CyberRota
← Ana sayfaya dön

CVE-2026-41310

MEDIUM · CVSS 5.3 EPSS %0.02 Public Exploit

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-05-06T22:16:25.643 · Çekilme zamanı: 2026-06-05T18:01:13.315929+00:00

CyberRota Yorumu

Bellek tüketimine neden olabilir. Uzaktan istismar edilebilir olabilir.

Public Exploit Sinyali

Bu CVE için açıklama veya referanslarda public exploit / PoC / GitHub / Metasploit sinyali tespit edildi.

Not: Bu bağlantılar yalnızca güvenlik araştırması ve doğrulama amacıyla listelenmiştir.

CVE
CVE-2026-41310
Severity
MEDIUM
CVSS
5.3
EPSS
%0.02

Orijinal NVD Açıklaması

OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and earlier, the Zipkin exporter remote endpoint cache accepts unbounded key growth derived from span attributes. In high-cardinality scenarios, a process using Zipkin export for client or producer spans could experience avoidable memory growth under sustained unique remote endpoint values, increasing process memory usage over time and degrading availability. This issue is fixed in version 1.15.3, which introduces a bounded, thread-safe LRU cache for remote endpoints with a fixed maximum size.