Threats tagged 'ghsa-jv3j-8935-75r6'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-118686EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulnerability in which the High8.72026-10-28GCVE DatabaseCVE-2026-118686 EspoCRM versions before 9.3.11 and 10.x before 10.0.8 contain a denial of service vulnerability due to a CPU-intensive password-redaction regular expression in API error handling. Unauthenticated remote attackers can exploit this by sending a few large API requests concurrently, exhausting server resources and causing service slowdowns or unavailability. Report on CVE-2026-118686 Vulnerability CWE-1333 #ghsa-jv3j-8935-75r6	GCVE Database	2026-10-28

Page 1 of 1