Lucene search
+L

5 matches found

attackerkb
attackerkb
•added 2026/08/12 9:40 p.m.•26 views

CVE-2026-71469

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-ap...

7.5CVSS5.8AI score0.00737EPSS
SaveExploits0References3
Mend
Mend
•added 2026/08/12 9:40 p.m.•9 views

CVE-2026-71469

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-ap...

8.7CVSS5.8AI score0.00737EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2026/08/12 9:40 p.m.•19 views

CVE-2026-71469

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-ap...

7.5CVSS5.7AI score0.00737EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/12 12:00 a.m.•9 views

CVE-2026-71469: Allocation of Resources Without Limits or Throttling

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-ap...

7.5CVSS5.8AI score0.00737EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/12 12:00 a.m.•16 views

PT-2026-71358

Name of the Vulnerable Software and Affected Versions search-v2-api affected versions not specified Description An unauthenticated attacker can cause a Denial of Service DoS by sending requests containing unique random bearer tokens. This activity creates permanent entries in the unbounded...

7.5CVSS5.8AI score0.00737EPSS
SaveExploits0References14
Rows per page
Query Builder