CVE-2026-107564
7.5HighPublished 16 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-770
Impact
Remote, unauthenticated attackers can cause high CPU consumption and crash or hang the service. All they need is network reachability to the exposed service.
Root cause
The application allocates resources without limits or throttling controls, allowing uncontrolled CPU exhaustion.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Check the vendor advisory link for fixed release packages, and restrict or rate-limit inbound network traffic to the service at the firewall level until patched.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load leading to a denial of service.