CVE-2026-50787: n/a
Description
e-SIC Livre (esiclivre) version 0.2.2 and earlier contains a vulnerability in the captcha generation script that allows remote attackers to cause denial of service by exhausting server resources. This occurs because user-supplied parameters are not validated before being used to generate CAPTCHA images, leading to excessive memory and CPU consumption.
Affected software
pkg:github/esiclivre/esiclivreRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability exists in e-SIC Livre (esiclivre) v0.2.2 and earlier within the restrito/inc/captcha.php file. The application uses user-supplied parameters (l, a, tf, ql) without proper validation to generate CAPTCHA images. This lack of validation enables remote attackers to craft requests that cause uncontrolled resource consumption, resulting in denial of service conditions due to excessive memory and CPU usage.
Potential Impact
Successful exploitation of this vulnerability can cause denial of service by consuming excessive server memory and CPU resources, potentially making the application unavailable to legitimate users. There is no information about other impacts such as data disclosure or code execution.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing input validation or rate limiting on the CAPTCHA generation parameters to mitigate excessive resource consumption.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-06-07T00:00:00.000Z
- State
- PUBLISHED
Threat ID: 6adb85e9d73cc49347a4857e
Added to database: 10/23/2026, 16:06:01 UTC
Last enriched: 10/23/2026, 16:20:10 UTC
Last updated: 10/23/2026, 16:25:19 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.