Improper validation of array index vulnerability in Velneo vServer. (CVE-2026-114405)

The vulnerability identified as CVE-2026-114405 affects Velneo vServer due to improper validation of array indices. This flaw is present in versions starting from 36.0 up to but not including 36.6, and from 37.0 up to but not including 37.2. The vulnerability is categorized under CWE-129, which involves improper validation of array index leading to potential memory corruption or logic errors. The CVSS 4.0 vector indicates a network attack vector with no privileges or user interaction required, and a high impact on availability, confidentiality, and integrity, though the exact exploitability metrics are unspecified (marked as unknown). No known exploits are reported in the wild, and no patch or remediation information is provided in the source data.

If exploited, this vulnerability could allow an unauthenticated attacker to cause high impact on the system's availability, confidentiality, and integrity by leveraging improper array index validation. The exact exploitation method and consequences are not detailed, but the high severity rating suggests significant potential damage.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Velneo's official channels for updates and apply any forthcoming patches promptly.