AUGUST 14, 2026
Live Feed
Back to database
Case File

CVE-2026-64951

LOW · CVSS 3.5 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-08-12 · Last synced 2026-08-14

CyberRota Analysis

AI-Generated

A vulnerability exists in the handling of malformed sparse files by the Velociraptor client, which can lead to a server process crash due to a Divide by Zero error in the ShouldPadFile() function. While the severity is rated low, organizations using Velociraptor should prioritize addressing this issue to prevent potential service disruptions. Users should ensure they are running the latest version to mitigate the risk of exploitation.

CVE
CVE-2026-64951
Severity
LOW
CVSS
3.5
EPSS
0.16%

Original NVD Description

A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The problem is a Divide by Zero bug in the ShouldPadFile() function.