OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-76646

HIGH · CVSS 7.5 EPSS 0.58%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

A remote attacker can exploit this vulnerability by sending specially crafted request parameters, leading to excessive resource consumption and potential denial of service. Organizations using older or unsupported versions of the affected products should prioritize upgrading to the specified secure versions (2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, or 4.1.4) to mitigate this risk.

CVE
CVE-2026-76646
Severity
HIGH
CVSS
7.5
EPSS
0.58%

Original NVD Description

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, or 4.1.4, which fix this issue.