CVE-2026-79625CWE-362
CVE-2026-79625
High · published September 30, 2026
What it is
Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit this issue to cause incorrect data processing or a denial-of-service condition.
The record
Technical detail
- CVSS v3.1
- 8.1 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- CVSS v4.0
- 7.2 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00229 · 13.0th percentile
- Weakness
- CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
- Published
- 2026-09-30T14:17Z
References (1)
EPSS history
Timeline