CVE-2026-5794
NoneCVSS
—
EPSS
0.4%
Published
Apr 28, 2026
CISA due date
—
The record
A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted request.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- GHSA-xh5w-g8gq-r3v9 Keylime allows users to register new agents by recycling existing UUIDs when using… CWE-694
- CVE-2025-13609 A vulnerability has been identified in keylime where an attacker can exploit this flaw by… CWE-694
- CVE-2025-59048 OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method CWE-694