CVE-2021-47814CWE-120

NBMonitor 1.6.8 - Denial of Service (PoC)

Medium · published January 15, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
34.8
In the wild
Unconfirmed
What it is

⚠️ A single 256-character string is all it takes to make NBMonitor crash! This denial of service vulnerability is surprisingly simple yet impactful. 😱 Think of this like a restaurant where a customer can order a dish that’s designed to overflow the kitchen — when the chefs can’t handle the order, the entire operation comes to a halt! If exploited, an attacker could cause the application to crash, leading to service downtime and potential instability for users. This could disrupt operations and frustrate everyone relying on the application to run smoothly!

Put simply

Think of this like a restaurant where a customer can order a dish that’s designed to overflow the kitchen — when the chefs can’t handle the order, the entire operation comes to a halt! This vulnerability allows attackers to overflow the registration code input field in NBMonitor 1.6.8, leading to a denial of service when a buffer exceeds its limit, crashing the application.

What to do

If exploited, an attacker could cause the application to crash, leading to service downtime and potential instability for users. This could disrupt operations and frustrate everyone relying on the application to run smoothly! To secure your system, patch NBMonitor to version 1.6.9 or later, which addresses this overflow issue. Additionally, monitor your input validation to ensure it handles unexpected data correctly. You’ve got this! With these steps, you’ll keep NBMonitor running smoothly and protect your users! 🛡️

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00416 · 34.8th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-15T23:25Z
EPSS history
Timeline
  • 15 JAN 23:25Z
    NBMonitor 1.6.8 - Denial of Service (PoC)
    cvelistv5