CVE-2026-22917

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published
Jan 15, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-229188.2An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously craCVE-2026-229194.8An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting (XSS) attCVE-2026-22924.4The Morkva UA Shipping plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and incluCVE-2026-229226.5Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limitCVE-2026-229237.8A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512). The affected application containCVE-2026-229249.1A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthentiCVE-2026-229257.5A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustionCVE-2026-229267.8Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability.CVE-2026-229277.8Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability.CVE-2026-22939.8A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalizatCVE-2026-22944.3The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of dCVE-2026-22955.3The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a mis
CVE-2026-22917: High severity, CVSS 7.5 | Vulnix