CVE-2026-27689
High · 7.7CVSS
7.7
EPSS
0.6%
Published
Mar 10, 2026
CISA due date
—
The record
Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution that consumes excessive system resources, potentially rendering the system unavailable. Successful exploitation results in a denial-of-service condition that impacts availability, while confidentiality and integrity remain unaffected.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-93653 A denial of service flaw was found in Poppler's Splash backend. CWE-606
- CVE-2026-85730 smol-toml is a small, fast, and correct TOML parser and serializer. CWE-606
- CVE-2026-13761 Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of… CWE-606
- CVE-2026-16599 GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication… CWE-606
- CVE-2026-62901 Unchecked input for loop condition in .NET allows an unauthorized attacker to deny… CWE-606
- CVE-2026-71439 Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify… CWE-606
- CVE-2026-33800 An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe)… CWE-606
- CVE-2026-15172 FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16… CWE-606