CVE-2026-109144

Publié : 13 octobre 2026

Modifié : 13 octobre 2026

Score CVSS

5.3

MEDIUM

Description détaillée

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Références et Patchs

https://github.com/wbond/certvalidator/https://github.com/wbond/certvalidator/issues/56 https://vuldb.com/cve/CVE-2026-109144 https://vuldb.com/submit/978613 https://vuldb.com/vuln/416883 https://vuldb.com/vuln/416883/cti

Dernières Vulnérabilités

CVE-2026-94410

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected.

VOIR DÉTAILS

CVE-2026-89279

Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. This issue affects authtake: from v1.3 before v1.4.

VOIR DÉTAILS

CVE-2026-63316

A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "not_in" query paramethers allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 3.90.0 and 4.0.0-canary.34.

VOIR DÉTAILS