CLEANSTART-2026-DQ29252

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-DQ29252.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-DQ29252
Upstream
Published
2026-09-19T00:40:30Z
Modified
2026-09-19T01:00:03Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service
Details

CVE-2026-66277 affects multiple packages. It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. See references for individual vulnerability details.

References

Affected packages

CleanStart / wildfly

Package

Name
wildfly

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
39.0.1-r9

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-DQ29252.json"

CleanStart / wso2am

Package

Name
wso2am

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.7.0-r2

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-DQ29252.json"