CVE-2026-125063

A flaw was found in the rrule validation of schedules in automation controller. Several non-anchored regular expressions with lazy wildcard prefixes are applied to the user-supplied rrule value; when the expected DTSTART/RRULE tokens are absent, validation time grows quadratically with the length...

CVE-2026-125063

A flaw in the rrule validation of schedules within the automation controller allows an authenticated user to perform a Denial of Service (DoS) attack. By submitting a large, token-free rrule via the REST API (including the schedule preview endpoint), the application applies non-anchored regular e...

EUVD-2026-120159

A flaw was found in the rrule validation of schedules in automation controller. Several non-anchored regular expressions with lazy wildcard prefixes are applied to the user-supplied rrule value; when the expected DTSTART/RRULE tokens are absent, validation time grows quadratically with the length...