CLEANSTART-2026-ZS57953

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ZS57953.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-ZS57953
Upstream
Published
2026-09-19T00:40:30Z
Modified
2026-09-19T01:00:04Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service
Details

CVE-2026-66275 affects multiple packages. An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. See references for individual vulnerability details.

References

Affected packages

CleanStart / wildfly

Package

Name
wildfly

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
39.0.1-r9

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ZS57953.json"

CleanStart / wso2am

Package

Name
wso2am

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.7.0-r2

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ZS57953.json"