CVE ID :CVE-2026-118686 Published : Oct. 28, 2026, 7:17 p.m. | 1 hour, 7 minutes ago Description :EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulnerability in which the password-redaction regular expression applied during API error handling consumes excessive CPU...

#Sicherheitslücke #DDoS

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-118686 - EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex

VERWANDTEARTIKEL

CVE-2026-61572 - AVideo-Encoder: unauthenticated full-response server-side request forgery

CVE-2026-61567 - AVideo-Encoder: unauthenticated command execution through streamer login trust

CVE-2026-61564 - AVideo-Encoder: unauthenticated installer PHP code injection

CVE-2026-93851 - Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted post

CVE-2026-118668 - LangGraph JavaScript custom authentication may permit cross-user Store access

CVE-2026-118660 - Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML