CVE-2026-114405CWE-129

CVE-2026-114405

published October 21, 2026

CVSS
8.7
EPSS
0%
Percentile
26.6
In the wild
Unconfirmed
What it is

Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 and from 37.0 before 37.2.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00344 · 26.6th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2026-10-21T17:18Z
References (1)
https://velneo.es/avisos-de-seguridad/ · 6b608899-1da4-4a4d-8cfe-114101467ac1
EPSS history
Timeline
  • 23 OCT 03:55Z
    EPSS moved — → 0%
    epss
  • 21 OCT 12:27Z
    Denial of Service via Malformed VATP Packet in Velneo vServer
    cvelistv5
  • 21 OCT 12:27Z
    Denial of Service via Malformed VATP Packet in Velneo vServer
    cvelistv5