CVE-2026-101021CWE-407

CVE-2026-101021

High · published October 16, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00343 · 26.4th percentile
Weakness
CWE-407 · Inefficient Algorithmic Complexity
Published
2026-10-16T19:16Z
References (2)
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-02.json · [email protected]https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02 · [email protected]
EPSS history
Timeline
  • 18 OCT 03:26Z
    EPSS moved — → 0%
    epss
  • 16 OCT 14:28Z
    J4Care dcm4che Inefficient Algorithmic Complexity
    cvelistv5
  • 16 OCT 14:28Z
    J4Care dcm4che Inefficient Algorithmic Complexity
    cvelistv5