CVE-2026-84778: CWE-770 Allocation of Resources Without Limits or Throttling in migrateguru Migrate Guru – Site Migration & Cloning

This vulnerability, identified as CWE-770, involves allocation of resources without limits or throttling in Migrate Guru – Site Migration & Cloning versions up to 6.65. An unauthenticated attacker can exploit this flaw to trigger a denial of service condition by overwhelming the system's resources. The CVSS 3.1 score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability disruption. There is no vendor advisory or patch information available at this time.

The impact is a denial of service condition that can be triggered remotely without authentication, causing service disruption and potentially making the migration service unavailable to legitimate users. There is no reported confidentiality or integrity impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing external rate limiting or resource usage monitoring to mitigate potential denial of service attempts.