CVE-2026-9718
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk15th percentile — higher than 15% of all known CVEs
Summary
A CWE-617 Reachable Assertion vulnerability allows an authenticated attacker to trigger a denial-of-service (DoS) condition by sending a specially crafted request to a vulnerable network-exposed service. This impacts system availability.
Risk Assessment
The risk involves potential disruption of critical network services by an authenticated attacker, leading to system unavailability and affecting business continuity.
Recommendation
Immediately update the affected component to the latest patched version. If unavailable, restrict access to the vulnerable service to trusted IP addresses and implement monitoring for anomalous requests.
Original NVD description (English source)
CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-service condition, impacting system availability when a specially crafted request is sent to a vulnerable network-exposed service.