CVE-2026-33260

MediumCVSS 5.3

Published: 22/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

44th percentile - higher than 44% of all known CVEs

Summary

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.

Risk Assessment

If the internal web server is enabled, memory exhaustion can occur and cause a service outage.

Recommendation

Keep the internal web server disabled or update the software to a version that limits memory allocation.

Other vulnerabilities in Internal web server

See all

CVE-2026-33257Medium
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.
CVE-2026-33256Medium
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.

Original NVD description (English source)

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS