CVE-2026-33231

🗓️ 20 Mar 2026 22:45:40Reported by Debian Security Bug TrackerType

NLTK before 3.9.3 allows unauthenticated remote shutdown of WordNet Browser HTTP server, causing denial of service; patched.

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in NLTK bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage	17 Jun 202613:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a missing authentication and cross-site Scripting in NLTK [CVE-2026-33230, CVE-2026-33231]	21 May 202614:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	19 May 202605:41	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	30 Jun 202607:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to XSS (CVE-2026-33230), denial of service (CVE-2026-33231, GHSA-rf74-v2fm-23pw) and path traversal (CVE-2026-33236)	26 Mar 202616:02	–	ibm
ATTACKERKB	CVE-2026-33231	20 Mar 202622:45	–	attackerkb
Information Security Automation	April Linux Patch Wednesday	22 Apr 202616:00	–	avleonov
Chainguard	CVE-2026-33231 vulnerabilities	26 Mar 202601:17	–	cgr
Circl	CVE-2026-33231	18 Mar 202611:50	–	circl
CNNVD	NLTK 访问控制错误漏洞	20 Mar 202600:00	–	cnnvd

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	999	any	nltk	3.10.0-1	nltk_3.10.0-1_any.deb
Debian	11	any	nltk	3.5-1	nltk_3.5-1_any.deb
Debian	12	any	nltk	3.8-1	nltk_3.8-1_any.deb
Debian	13	any	nltk	3.9.1-2	nltk_3.9.1-2_any.deb
Debian	14	any	nltk	3.9.3-1	nltk_3.9.3-1_any.deb

20 Mar 2026 22:45Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.17.5

EPSS0.00875

SSVC