CVE-2026-84776: CWE-770 Allocation of Resources Without Limits or Throttling in malcare MalCare Security

This vulnerability, identified as CWE-770, involves allocation of resources without limits or throttling in MalCare Security software versions up to 6.69. An unauthenticated attacker can exploit this weakness to cause a denial of service condition, impacting the availability of the affected system. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

The vulnerability allows unauthenticated attackers to cause denial of service by exhausting resources, leading to service disruption. There is no impact on confidentiality or integrity of data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor for unusual resource consumption and consider implementing external rate limiting or other protective controls if feasible.