CVE-2026-39767: CWE-770 Allocation of Resources Without Limits or Throttling in baseapp WPBase Cache

This vulnerability (CWE-770) in WPBase Cache (<= 5.5.6) allows an attacker to cause a denial of service by triggering uncontrolled resource allocation. The flaw arises from the lack of limits or throttling on resource allocation, which can exhaust system resources and disrupt service availability. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low complexity and no user interaction required, but requiring low privileges. No known exploits are reported in the wild, and no official patch or remediation information is provided in the source data.

The impact is a denial of service condition affecting availability. There is no impact on confidentiality or integrity. An attacker with low privileges can exploit this vulnerability remotely without user interaction to disrupt service by exhausting resources.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitoring vendor communications for updates is recommended. No specific mitigations are detailed in the available data.