CVE-2026-31984CWE-770denial-of-service

CVE-2026-31984

High · published July 9, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functionality, due to a missing size limit on input recorded into audit entries. An unauthenticated attacker can submit requests containing excessively large input that is recorded into audit entries, possibly exhausting the available disk space and rendering the system inoperable.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00509 · 42.6th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-07-09T12:16Z
Affected products (2)
ProductVersionsFixed in
nozominetworks/cmc< 26.2.026.2.0
nozominetworks/guardian< 26.2.026.2.0
References (2)
https://security.nozominetworks.com/NN-2026:11-01 · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-827968.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 09 JUL 07:22Z
    DoS through oversized audit log entries in Guardian/CMC before 26.2.0
    cvelistv5