Threats tagged 'ghsa-hx4x-9v2m-mwwq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.8	CVE-2026-97891In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in High8.82026-11-10GCVE DatabaseCVE-2026-97891 Eclipse Kura versions 5.0.0 through 5.6.2 have a vulnerability in the Web Console where each request to certain authentication endpoints causes a new HTTP session to be allocated before any authentication checks. This allows an unauthenticated attacker to trigger unbounded session creation, exhausting JVM heap memory and crashing the Kura process. Report on CVE-2026-97891 Vulnerability CWE-400 #ghsa-hx4x-9v2m-mwwq	GCVE Database	2026-11-10

Page 1 of 1