CVE-2026-44410
Low · 3.8CVSS
3.8
EPSS
0.2%
Published
May 26, 2026
CISA due date
—
The record
This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the designer's expectations, to carry out malicious attacks.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-50303 Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows… CWE-1240
- CVE-2026-46654 Plonky3 is a toolkit for polynomial IOPs (PIOPs). CWE-1240
- GHSA-vj64-rjf3-w3v7 Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss CWE-1240
- CVE-2025-64647 IBM Concert 1.0.0 through 2.2.0 uses weaker than expected cryptographic algorithms that… CWE-1240
- CVE-2026-27017 uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting… CWE-1240
- CVE-2025-62514 Parsec is a cloud-based application for cryptographically secure file sharing. CWE-1240
- CVE-2026-22705 RustCrypto: Signatures offers support for digital signatures, which provide… CWE-1240
- GHSA-848j-6mx2-7j84 Elliptic Uses a Cryptographic Primitive with a Risky Implementation CWE-1240