CVE-2026-33231

🗓️ 20 Mar 2026 22:45:40Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 29 Views

CVE-2026-33231: NLTK WordNet Browser can be shut down remotely via GET /SHUTDOWN THE SERVER, causing denial of service.

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a missing authentication and cross-site Scripting in NLTK [CVE-2026-33230, CVE-2026-33231]	21 May 202614:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	19 May 202605:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to XSS (CVE-2026-33230), denial of service (CVE-2026-33231, GHSA-rf74-v2fm-23pw) and path traversal (CVE-2026-33236)	26 Mar 202616:02	–	ibm
ATTACKERKB	CVE-2026-33231	20 Mar 202622:45	–	attackerkb
Information Security Automation	April Linux Patch Wednesday	22 Apr 202616:00	–	avleonov
Chainguard	CVE-2026-33231 vulnerabilities	26 Mar 202601:17	–	cgr
Circl	CVE-2026-33231	18 Mar 202611:50	–	circl
CNNVD	NLTK 访问控制错误漏洞	20 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-33231 NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app	20 Mar 202622:45	–	cvelist
Debian CVE	CVE-2026-33231	20 Mar 202622:45	–	debiancve

NVD

Vulners

Node

nltk nltkRange≤3.9.3

[
  {
    "vendor": "nltk",
    "product": "nltk",
    "versions": [
      {
        "version": "<= 3.9.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/nltk/nltk/commit/bbaae83db86a0f49e00f5b0db44a7254c268de9b
github	www.github.com/nltk/nltk/security/advisories/GHSA-jm6w-m3j8-898g

23 Mar 2026 19:15Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.00542

SSVC

CWE-306